CVE-2020-9488

CVE-2020-9488 affects the Apache Log4j2 SMTP appender. The issue is improper validation of the SSL/TLS certificate when the host name does not match, potentially allowing a man-in-the-middle to intercept SMTPS traffic and leak log messages. The concrete remediation is to upgrade to affected relea...

CVE-2015-3253

CVE-2015-3253 affects Apache Groovy 1.7.0–2.4.3. The vulnerability resides in deserialization via crafted serialized objects in the MethodClosure.java runtime, enabling remote code execution or DoS. Exploitation was reported across multiple advisories; F5 and other vendors reference the same issu...

CVE-2020-13954

CVE-2020-13954 is an Apache CXF cross-site scripting (XSS) vulnerability exposed via the /services listing page. The issue arises from improper validation of user-supplied input through styleSheetPath, enabling an attacker to inject script when the URL is visited. Public documentation in the init...

CVE-2016-0635

The connected Nessus/NASL records tie CVE-2016-0635 to the Oracle Siebel CRM knowledge component (AnswerFlow Spring Framework) in Siebel CRM. Affected versions are 8.5.1.0–8.5.1.7 and 8.6.0. The vulnerability in the Oracle Knowledge component can be exploited remotely over HTTP by a low-privilege...

CVE-2016-0500

The CVE-2016-0500 entry concerns Oracle Retail Applications (4.0 and 4.1) specifically the Oracle Retail Order Broker Cloud Service component. The vulnerability is described as unspecified and remote in nature, with affected systems potentially impacting confidentiality, integrity, and availabili...

CVE-2016-3611

CVE-2016-3611 targets Oracle Retail Order Broker in Oracle Retail Applications 15.0. Affected component: Order Broker; vulnerability described as unspecified but remote, impacting confidentiality and integrity via System Administration related vectors. CVSSv3 base score 5.4 (Medium) with Network ...