Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2024-0117 6 CVEs

Oracle Retail Applications: Mehrere Schwachstellen

Published Jan 16, 2024 · Updated Jan 16, 2024 · de-DE

Vendor: Oracle Product: Retail Applications Product: Retail Applications <= 23.0.0 Product: Retail Applications 15.0.3 Product: Retail Applications 16.0.3 Product: Retail Applications 18.0.0.14 Product: Retail Applications 19.0.0.8 Product: Retail Applications 20.0.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Retail Applications ist eine Sammlung von Produkten zur Unterstützung u. a. von Handelsfirmen und der Gastronomie.

Vulnerabilities 6

  • High 7.5
    CVE-2023-44487 Exploited Public exploit EPSS 100%

    HTTP/2 Stream Cancellation Attack

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
    KEV Oct 10, 2023
  • Critical 9.8
    CVE-2022-42920

    Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

    Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pa…

    Apache Software Foundation Apache Commons BCEL bcel bcel Debian Ubuntu Azure Linux Maven
  • High 7.5
    CVE-2023-24998 Public exploit EPSS 49%

    Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

    Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…

    Apache Software Foundation Apache Tomcat Apache Commons FileUpload tomcat9 Debian Ubuntu Maven
  • Medium 6.5
    CVE-2021-41182 Public exploit EPSS 39%

    XSS in the `altField` option of the Datepicker widget

    jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…

    jquery jquery-ui drupal7 jQuery.UI.Combined Debian Ubuntu Alpine npm Maven NuGet RubyGems
  • Medium 6.1
    CVE-2020-26870

    Cross-site Scripting in dompurify

    Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

    dompurify dompurify.js Ubuntu npm
  • Medium 5.0
    CVE-2023-35887 Public exploit

    Apache MINA SSHD: Information disclosure bugs with RootedFilesystem

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" in…

    Apache Software Foundation Apache MINA SSHD sonarqube org.apache.sshd:sshd-core Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References