Skip to content
OpenAdvisories
High WID-SEC-2024-1654 3 CVEs

Oracle Retail Applications: Mehrere Schwachstellen

Published Jul 16, 2024 · Updated Jul 16, 2024 · de-DE

Vendor: Oracle Product: Retail Applications Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Retail Applications ist eine Sammlung von Produkten zur Unterstützung u. a. von Handelsfirmen und der Gastronomie.

Vulnerabilities 3

  • High 8.6
    CVE-2024-21136 Scanner template

    Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported…

    Oracle Retail Xstore Office
  • High 8.1
    CVE-2024-22262 Public exploit

    CVE-2024-22262: Spring Framework URL Parsing with Host Validation

    Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  a…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 5.5
    CVE-2024-26308 Public exploit

    Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

    Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

    Apache Software Foundation Apache Commons Compress druid trino Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References