Vendor/product archive

oracle / micros_relate_crm_software CVEs

Beta · best-effort

4 CVEs tagged to oracle / micros_relate_crm_software — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to oracle vendor archive

CVE-2019-17563

Published Dec 23, 2019

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixat…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2018-1304

Published Feb 28, 2018

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-1305

Published Feb 23, 2018

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servl…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2016-8735

Published Apr 6, 2017

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListene…

CVSS 9.8 · Critical

evidence mentions: 2
Buzz score: 42.5

KEV listed

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1