← Back

Retail Order Management System Cloud Service

retail_order_management_system_cloud_service

Vendor: Oracle • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-11987
4Apache
DebianFedoraproject+1 more
22Agile Engineering Data Management
Banking ApisBanking Digital Experience+19 more
Nov 3, 2025
Feb 24, 2021
N/A· v4
8.2 HIGH· v3
6.4 MEDIUM· v2
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the...Show more
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.Show less
CVE-2019-17566
2Apache
Oracle
18Api Gateway
BatikBusiness Intelligence+15 more
Nov 21, 2024
Nov 12, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause...Show more
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.Show less
CVE-2016-0506
1Oracle
1Retail Order Management System Cloud Service
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vect...Show more
Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.Show less