Product by Oracle

Oracle Retail Service Backbone

45 known vulnerabilities in Oracle Retail Service Backbone (Oracle), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Retail Service Backbone (Oracle)

Critical	CVE-2017-5645	Apache Log4j: Deserialization of Untrusted Data also in 74 other products	9.8	17.04.2017
Critical	CVE-2019-17571	Apache Software Foundation Log4j: Deserialization of Untrusted Data also in 17 other products	9.8	20.12.2019
Critical	CVE-2015-3253	Apache Software Foundation Groovy: Denial of Service also in 4 other products	9.8	13.08.2015
High	CVE-2020-13936	Velocity Sandbox Bypass also in 14 other products	8.8	10.03.2021
High	CVE-2020-5398	Spring Framework: Cross-site Scripting also in 33 other products	8.0	16.01.2020
High	CVE-2020-5421	RFD Protection Bypass via jsessionid also in 36 other products	8.7	19.09.2020
Critical	CVE-2020-9546	FasterXML Jackson-databind: security vulnerability also in 31 other products	9.8	02.03.2020
High	CVE-2020-36179	FasterXML Jackson-databind: security vulnerability also in 43 other products	8.1	06.01.2021
High	CVE-2020-10673	FasterXML Jackson-databind: security vulnerability also in 31 other products	8.8	18.03.2020
High	CVE-2020-35728	FasterXML Jackson-databind: security vulnerability also in 40 other products	8.1	27.12.2020
High	CVE-2020-11113	FasterXML Jackson-databind: security vulnerability also in 32 other products	8.8	31.03.2020
High	CVE-2020-25649	Jackson-databind: Improper Restriction of XML External Entity Reference also in 39 other products	7.5	03.12.2020
High	CVE-2020-36188	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2020-36184	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2018-15756	DoS Attack via Range Requests also in 39 other products	7.5	18.10.2018
High	CVE-2016-5474	Oracle Retail Service Backbone: security vulnerability	8.8	21.07.2016
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
High	CVE-2020-11979	Apache Ant: Creation of Temporary File in Directory with Insecure Permissions also in 30 other products	7.5	01.10.2020
High	CVE-2021-40690	Bypass of the secureValidation property also in 18 other products	7.5	19.09.2021
High	CVE-2020-36183	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2020-10968	FasterXML Jackson-databind: security vulnerability also in 31 other products	8.8	26.03.2020
High	CVE-2020-11112	FasterXML Jackson-databind: security vulnerability also in 31 other products	8.8	31.03.2020
High	CVE-2020-10969	FasterXML Jackson-databind: security vulnerability also in 31 other products	8.8	26.03.2020
High	CVE-2020-36185	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2020-36187	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021

All vulnerabilities in search

News

SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News