Oracle Retail Order Management System Cloud Service vulnerabilities

3 vulnerabilities

Known vulnerabilities in Oracle Retail Order Management System Cloud Service, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2016-0506oracleretail_order_management_system_cloud_service
EPSS score
1.60%
Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.8.2CVE-2020-11987apachebatik+25
EPSS score
13.28%
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.7.5CVE-2019-17566apachebatik+25
EPSS score
10.87%
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.