CVE Intelligence

Vulnerabilidades do Oracle Retail Applications

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Oracle Retail Applications: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:oracle:retail_applications

CVE-2014-0050 Alta · 7.5 Exploit público CWE-264 01/04/2014
Permissions, Privileges, and Access Controls em Oracle Retail Applications
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.