Vulnerabilidades do Oracle Retail Price Management
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Retail Price Management: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:retail_price_management
CVE-2019-10219
Média · 6.1
CWE-79 08/11/2019
Cross-site Scripting (XSS) em Red Hat Hibernate Validator
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVE-2019-10086
Alta · 7.3
CWE-502 20/08/2019
Deserialization of Untrusted Data em Apache Software Foundation Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
CVE-2017-12617
Alta · 8.1
KEV Urgente · 76 Exploit público CWE-434 03/10/2017
Apache Tomcat Remote Code Execution Vulnerability
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.