Retail Customer Management And Segmentation Foundation vulnerabilities

Product

Retail Customer Management And Segmentation Foundation

by Oracle · last CVE Apr 1, 2022

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities55 In the news0 Timeline

Severity mix

Critical 11High 21Medium 18Low 5

Severity

All severities55 Critical11 High21 Medium18 Low5

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Retail Customer Management And Segmentation Foundation to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-30129	6.5	3%	Jul 12	A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error Affected: 18.0; 19.0
CVE-2020-5421	6.5	12%	Sep 19	RFD Protection Bypass via jsessionid Affected: 16.0 through 19.0
CVE-2020-2650	6.5	1%	Jan 15	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions) Affected: 16.0
CVE-2018-3053	6.4	1%	Jul 18	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Internal Operations) Affected: 16.0.1; 16.0.2; 17.0.1
CVE-2021-2057	6.3	1%	Jan 20	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations) Affected: 19.0
CVE-2020-2648	6.2	0%	Jan 15	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations) Affected: 16.0
CVE-2020-11022	6.1	99%	Apr 29	In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 19.0; 19.0
CVE-2019-2884	5.9	1%	Oct 16	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment) Affected: 17.0
CVE-2021-31812	5.5	3%	Jun 12	In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file Affected: 18.1
CVE-2021-31811	5.5	4%	Jun 12	In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file Affected: 18.1
CVE-2021-27906	5.5	3%	Mar 19	A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file Affected: 19.0
CVE-2021-27807	5.5	3%	Mar 19	A carefully crafted PDF file can trigger an infinite loop while loading the file Affected: 19.0
CVE-2020-14710	5.4	1%	Jul 15	Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security) Affected: 16.0; 17.0; 18.0
CVE-2020-28500	5.3	7%	Feb 15	Regular Expression Denial of Service (ReDoS) Affected: 19.0
CVE-2020-13956	5.3	9%	Dec 2	Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: 16.0 through 19.0
CVE-2020-2567	4.8	1%	Jan 15	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security) Affected: 18.0
CVE-2019-2883	4.6	1%	Oct 16	Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment) Affected: 17.0
CVE-2020-14708	4.3	1%	Jul 15	Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment) Affected: 16.0; 17.0; 18.0