Vulnerabilities > Oracle > Retail Xstore Point OF Service > 16.0.0

DATE CVE VULNERABILITY TITLE RISK
2018-06-27 CVE-2018-12536 In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using.
network
low complexity
eclipse oracle
5.3
2017-08-08 CVE-2017-10214 Unspecified vulnerability in Oracle Retail Xstore Point of Service
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office).
network
low complexity
oracle
8.2
2017-08-08 CVE-2017-10183 Unspecified vulnerability in Oracle Retail Xstore Point of Service
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale).
network
high complexity
oracle
6.5