Retail Invoice Matching

DATE	CVE	VULNERABILITY TITLE	RISK
2017-10-04	CVE-2017-12617	Unrestricted Upload of File with Dangerous Type vulnerability in multiple products When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. network high complexity apache canonical oracle debian netapp redhat CWE-434	8.1
2017-04-24	CVE-2017-3254	Unspecified vulnerability in Oracle Retail Invoice Matching 12.0/13.0 Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). network low complexity oracle	7.6