CVE-2019-17566

CVE-2019-17566 (Apache Batik) is a server-side request forgery caused by improper input validation in xlink:href attributes, potentially allowing an attacker to trigger arbitrary GET requests from the vulnerable server. Connected advisories reference Batik-related SSRF issues across IBM JRS, SUSE...

CVE-2020-11987

CVE-2020-11987 – SSRF in Apache Batik 1.13 . The initial description confirms a server-side request forgery via improper input validation in NodePickerPanel, enabling an attacker to make arbitrary GET requests from the server. Connected documents corroborate concrete remediation actions across ve...

CVE-2016-0506

The CVE-2016-0506 issue affects Oracle Retail Order Management System Cloud Service within Oracle Retail Applications (versions 3.5, 4.5, 4.7, 5.0, 15.0). The vulnerability is in the Order Entry subcomponent and has been described as an unspecified vulnerability that could allow remote attackers ...