Retail Customer Management And Segmentation Foundation vulnerabilities

Product

Retail Customer Management And Segmentation Foundation

by Oracle · last CVE Apr 1, 2022

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities55 In the news0 Timeline

Severity mix

Critical 11High 21Medium 18Low 5

Severity

All severities55 Critical11 High21 Medium18 Low5

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Retail Customer Management And Segmentation Foundation to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-22965 In wildKEV	9.8	100%	Apr 1	Spring Framework JDK 9+ Remote Code Execution Vulnerability Affected: 17.0; 18.0; 19.0
CVE-2020-5413	9.8	4%	Jul 31	Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization Affected: 16.0 through 19.0
CVE-2020-10683	9.8	7%	May 1	dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 16.0; 17.0; 18.0; 19.0
CVE-2020-2953	9.8	2%	Apr 15	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions) Affected: 18.0
CVE-2019-17267	9.8	5%	Oct 6	A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: 17.0
CVE-2019-16335	9.8	5%	Sep 15	A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: 17.0
CVE-2019-14540	9.8	11%	Sep 15	A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: 17.0
CVE-2019-14379	9.8	8%	Jul 29	SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of… Affected: 17.0
CVE-2018-11307	9.8	6%	Jul 9	An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5 Affected: 17.0
CVE-2019-3772	9.8	3%	Jan 18	Spring Integration XML External Entity Injection (XXE) Affected: 16.0; 17.0; 18.0
CVE-2018-14718	9.8	13%	Jan 2	FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic… Affected: 17.0