← Back

Retail Service Backbone

retail_service_backbone

Vendor: Oracle • 45 CVEs

CVEs (45)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-11040
3Debian
OracleVmware
28Agile Product Lifecycle Management
Application Testing SuiteCommunications Network Integrity+25 more
Nov 21, 2024
Jun 25, 2018
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpRespons...Show more
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the "jsonp" and "callback" JSONP parameters, enabling cross-domain requests.Show less
CVE-2017-5645
4Apache
NetappOracle+1 more
79Api Gateway
Application Testing SuiteAutovue Vuelink Integration+76 more
May 13, 2026
Apr 17, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, c...Show more
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.Show less
CVE-2016-5475
1Oracle
1Retail Service Backbone
May 6, 2026
Jul 21, 2016
N/A· v4
7.6 HIGH· v3
8.0 HIGH· v2
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via ve...Show more
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.Show less
CVE-2016-5474
1Oracle
1Retail Service Backbone
May 6, 2026
Jul 21, 2016
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via ve...Show more
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RSB Kernel.Show less
CVE-2015-3253
2Apache
Oracle
6Groovy
Health Sciences Clinical Development CenterRetail Order Broker Cloud Service+3 more
May 6, 2026
Aug 13, 2015
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.