[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCIcGLtHP5ahqz0T0g5dMNKIBtICW50QjwZJSgOcoRrk":3,"g5a-family:oracle\u002Fmicros_relate_crm_software":80,"g5a-ex:oracle\u002Fmicros_relate_crm_software@*":81},{"success":4,"data":5},true,{"product":6,"versions":19,"topVulnerabilitiesByEpss":22,"kevVulnerabilities":52,"seoMetadata":58,"meta":77},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":18},"oracle","micros_relate_crm_software",2,4,1,"2019-12-23",[14,16],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},"10.8",{"version":17,"cve_count":10,"kev_count":11,"has_kev":4},"11.4","Micros Relate Crm Software by Oracle is a technology product with 2 tracked versions and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[20,21],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},{"version":17,"cve_count":10,"kev_count":11,"has_kev":4},[23,31,40,46],{"cveId":24,"description":25,"publishedDate":26,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":4,"epssScore":30},"CVE-2016-8735","Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","2017-04-06",9.8,"v3.1","Critical",0.90338,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":39},"CVE-2018-1304","The URL pattern of \"\" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.","2018-02-28",5.9,"v3.0","Medium",false,0.1707,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":45},"CVE-2018-1305","Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.","2018-02-23",6.5,0.14472,{"cveId":47,"description":48,"publishedDate":12,"cvssScore":49,"cvssVersion":28,"severity":50,"isKev":38,"epssScore":51},"CVE-2019-17563","When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has been treated as a security vulnerability.",7.5,"High",0.10687,[53],{"cveId":24,"description":25,"publishedDate":26,"cvssScore":27,"severity":29,"isKev":4,"epssScore":30,"cisaVulnName":54,"cisaDateAdded":55,"cisaShortDescription":56,"cisaRequiredAction":57},"Apache Tomcat Remote Code Execution Vulnerability","2023-05-12","Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.","Apply updates per vendor instructions.",{"title":59,"metaDescription":60,"keywords":61,"structuredData":62},"Micros Relate Crm Software by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Micros Relate Crm Software by Oracle covering 2 versions with 4 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Micros Relate Crm Software vulnerabilities, Micros Relate Crm Software security, Micros Relate Crm Software CVE, Oracle Micros Relate Crm Software, Micros Relate Crm Software threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Micros Relate Crm Software KEV, Micros Relate Crm Software exploited vulnerabilities",{"@context":63,"@type":64,"name":65,"description":60,"url":66,"manufacturer":67,"applicationCategory":71,"softwareVersion":72,"mainEntity":73},"https:\u002F\u002Fschema.org","SoftwareApplication","Micros Relate Crm Software","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fmicros_relate_crm_software",{"@type":68,"name":69,"url":70},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","2 versions tracked",{"@type":74,"name":75,"description":76,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Micros Relate Crm Software Security Vulnerabilities","Security vulnerabilities affecting Micros Relate Crm Software by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":78,"apiVersion":79},"2026-10-17T18:19:42.493Z","3.0",[],{"rows":82,"total":11,"capped":38,"failed":87},[83],{"cveId":24,"name":54,"severity":29,"cvss":27,"added":55,"epss":30,"published":84,"ranges":85,"checked":4,"hits":86,"covers":38},"2017-04-06T21:59:00.243",[15,17],[],0]