oracle / retail_clearance_optimization_engine CVEs

Beta · best-effort

4 CVEs tagged to oracle / retail_clearance_optimization_engine — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to oracle vendor archive

CVE-2019-12415

Published Oct 23, 2019

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-2904

Published Oct 16, 2019

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-11040

Published Jun 25, 2018

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON w…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2018-11039

Published Jun 25, 2018

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HT…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1