Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Retail Service Backbone
Total 45 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-17571 6 Apache, Canonical, Debian and 3 more 17 Bookkeeper, Log4j, Ubuntu Linux and 14 more 2026-06-17 7.5 HIGH 9.8 CRITICAL
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
CVE-2019-17091 2 Eclipse, Oracle 23 Mojarra, Application Testing Suite, Banking Enterprise Product Manufacturing and 20 more 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.
CVE-2016-5475 1 Oracle 1 Retail Service Backbone 2026-06-17 8.0 HIGH 7.6 HIGH
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5474 1 Oracle 1 Retail Service Backbone 2026-06-17 9.0 HIGH 8.8 HIGH
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RSB Kernel.
CVE-2015-3253 2 Apache, Oracle 6 Groovy, Health Sciences Clinical Development Center, Retail Order Broker Cloud Service and 3 more 2026-06-17 7.5 HIGH 9.8 CRITICAL
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.