Retail Point-of-service Security Vulnerabilities and Issues — Retail Point-of-service CVE List

Lucene search

OracleRetail Point-of-service

3 matches found

CVE•added 2018/05/11 8:29 p.m.•221 views

CVE-2018-1258

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

8.8CVSS9AI score0.00221EPSS

CVE•added 2018/05/24 4:29 p.m.•164 views

CVE-2018-8013

In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

9.8CVSS8.6AI score0.0098EPSS

CVE•added 2018/04/19 2:29 a.m.•37 views

CVE-2018-2862

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: User Interface). Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to com...

7.1CVSS6.8AI score0.00327EPSS