VUMETRIC
CYBER PORTAL
Dashboard
Security News
Latest Vulnerabilities
Browse Vulnerabilities
by Vendors
by Products
by Categories
Weekly Reports
Vulnerabilities
>
Oracle
>
Retail Eftlink
> 19.0.1
Exclude new CVEs:
DATE
CVE
VULNERABILITY TITLE
RISK
2021-12-18
CVE-2021-45105
Uncontrolled Recursion vulnerability in multiple products
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
network
high complexity
apache
netapp
debian
sonicwall
oracle
CWE-674
5.9
5.9
2021-07-14
CVE-2021-36373
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs.
local
low complexity
apache
oracle
5.5
5.5
2021-07-14
CVE-2021-36374
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs.
local
low complexity
apache
oracle
5.5
5.5
2020-10-01
CVE-2020-11979
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them.
network
low complexity
apache
gradle
fedoraproject
oracle
7.5
7.5
2020-04-27
CVE-2020-9488
Improper Certificate Validation vulnerability in multiple products
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.
network
high complexity
apache
oracle
debian
qos
CWE-295
3.7
3.7
2019-11-08
CVE-2019-10219
A vulnerability was found in Hibernate-Validator.
network
low complexity
redhat
netapp
oracle
6.1
6.1