Product by Oracle

    Retail Assortment Planning

    20 known vulnerabilities in Retail Assortment Planning (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Retail Assortment Planning (Oracle)
    CriticalCVE-2020-2555

    Oracle Multiple Products Remote Code Execution Vulnerability

    In CISA KEValso in 10 other products

    		9.8
    CriticalCVE-2019-2904

    Oracle Enterprise Repository: security vulnerability

    also in 22 other products

    		9.8
    HighCVE-2020-5398

    Spring Framework: Cross-site Scripting

    also in 33 other products

    		8.0
    HighCVE-2020-5421

    RFD Protection Bypass via jsessionid

    also in 36 other products

    		8.7
    MediumCVE-2021-44832

    Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

    also in 21 other products

    		6.6
    HighCVE-2018-15756

    DoS Attack via Range Requests

    also in 39 other products

    		7.5
    HighCVE-2020-11979

    Apache Ant: Creation of Temporary File in Directory with Insecure Permissions

    also in 30 other products

    		7.5
    HighCVE-2018-1258

    Pivotal Spring Framework: security vulnerability

    also in 41 other products

    		8.8
    HighCVE-2021-2351

    Oracle WebLogic Server: security vulnerability

    also in 97 other products

    		8.3
    MediumCVE-2019-3740

    Dell RSA BSAFE Crypto-J: Cryptographic Issues

    also in 18 other products

    		6.5
    MediumCVE-2021-29425

    Possible limited path traversal vulnerabily in Apache Commons IO

    also in 60 other products

    		4.8
    MediumCVE-2019-3739

    Dell RSA BSAFE Crypto-J: Cryptographic Issues

    also in 16 other products

    		6.5
    LowCVE-2020-9488

    Apache Log4j: security vulnerability

    also in 44 other products

    		3.7
    MediumCVE-2018-11039

    Pivotal Spring Framework: Cross-Site Scripting (XSS)

    also in 33 other products

    		5.9
    MediumCVE-2019-17091

    Eclipse Mojarra: Cross-Site Scripting (XSS)

    also in 21 other products

    		6.1
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    MediumCVE-2020-5397

    CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux

    also in 27 other products

    		5.3
    MediumCVE-2020-1945

    Apache Ant: security vulnerability

    also in 44 other products

    		6.3
    MediumCVE-2019-3738

    Dell RSA BSAFE Crypto-J: Missing Cryptographic Step

    also in 16 other products

    		6.5
    HighCVE-2021-22118

    Spring Framework: Improper Privilege Management

    also in 31 other products

    		7.8

    News

    All products by Oracle