Oracle Retail Pricing vulnerabilities

1 vulnerability

Known vulnerabilities in Oracle Retail Pricing, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2021-29425apache software foundation · apache commons io +185 morePossible limited path traversal vulnerabily in Apache Commons IOIn Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.CVSS6.5MediumEPSS10.55%