Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe

Filtered by product Retail Order Management System Cloud Service

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 2 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2020-11987	3 Apache, Fedoraproject, Oracle	18 Batik, Fedora, Banking Apis and 15 more	2024-01-07	6.4 MEDIUM	8.2 HIGH
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2019-17566	2 Apache, Oracle	18 Batik, Api Gateway, Business Intelligence and 15 more	2024-01-07	5.0 MEDIUM	7.5 HIGH
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.