Product by Oracle

Oracle Retail Order Broker

39 known vulnerabilities in Oracle Retail Order Broker (Oracle), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Retail Order Broker (Oracle)

Critical	CVE-2017-12617	Apache Tomcat Remote Code Execution Vulnerability In CISA KEValso in 54 other products	8.1	03.10.2017
Critical	CVE-2018-1270	Spring Framework: Code Injection also in 28 other products	9.8	06.04.2018
Critical	CVE-2018-1275	Spring Framework: Code Injection also in 19 other products	9.8	11.04.2018
Critical	CVE-2018-8013	Apache Batik: Deserialization of Untrusted Data also in 21 other products	9.8	24.05.2018
Critical	CVE-2019-13990	Software Quartz: XML External Entity (XXE) also in 27 other products	9.8	26.07.2019
Critical	CVE-2019-12419	Apache CXF: security vulnerability also in 4 other products	9.8	06.11.2019
High	CVE-2020-13936	Velocity Sandbox Bypass also in 14 other products	8.8	10.03.2021
Critical	CVE-2020-10683	Dom4j Project Dom4j: XML External Entity (XXE) also in 36 other products	9.8	01.05.2020
High	CVE-2020-5398	Spring Framework: Cross-site Scripting also in 33 other products	8.0	16.01.2020
High	CVE-2020-5421	RFD Protection Bypass via jsessionid also in 36 other products	8.7	19.09.2020
High	CVE-2019-0227	Apache Axis 1.4: Server-Side Request Forgery (SSRF) also in 34 other products	7.5	01.05.2019
High	CVE-2020-11987	Apache Batik: Server-Side Request Forgery (SSRF) also in 22 other products	8.2	24.02.2021
High	CVE-2018-8034	Apache Tomcat: security vulnerability also in 4 other products	7.5	01.08.2018
High	CVE-2020-9484	Apache Tomcat: Deserialization of Untrusted Data also in 25 other products	7.0	20.05.2020
High	CVE-2022-25647	Deserialization of Untrusted Data also in 7 other products	7.7	01.05.2022
Medium	CVE-2021-44832	Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration also in 21 other products	6.6	28.12.2021
Critical	CVE-2020-9409	TIBCO JasperReports Server Fails To Enforce Access Restrictions also in 4 other products	9.8	20.05.2020
High	CVE-2019-17566	Apache Batik: Server-Side Request Forgery (SSRF) also in 17 other products	7.5	12.11.2020
High	CVE-2019-17563	Apache Tomcat: Session Fixation also in 11 other products	7.5	23.12.2019
High	CVE-2018-15756	DoS Attack via Range Requests also in 39 other products	7.5	18.10.2018
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
High	CVE-2019-12423	Apache CXF: security vulnerability also in 7 other products	7.5	16.01.2020
Medium	CVE-2018-1271	Spring Framework: Path Traversal also in 28 other products	5.9	06.04.2018
High	CVE-2020-9410	TIBCO JasperReports Library also in 7 other products	7.3	20.05.2020
Medium	CVE-2018-8032	Apache Axis: Cross-Site Scripting (XSS) also in 36 other products	6.1	02.08.2018

All vulnerabilities in search

News

SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-784507 V1.0: Apache Log4j Vulnerability (CVE-2021-44832) via JDBC Appender - Impact to Siemens Productssiemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News