Vulnerabilidades do Oracle Retail Open Commerce Platform
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Retail Open Commerce Platform: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:retail_open_commerce_platform
CVE-2018-1257
Média · 6.5
11/05/2018
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and…
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack.
CVE-2018-1270
Crítica · 9.8
CWE-94 06/04/2018
Code Injection em Vmware Spring Framework
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.
CVE-2017-5645
Crítica · 9.8
Exploit público CWE-502 17/04/2017
Deserialization of Untrusted Data em Apache Software Foundation Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.