[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-zVHvzFWpi9NWRTbFYCkq4yllsCE4t51W_vqom4FZhg":3,"g5a-family:oracle\u002Fretail_back_office":361,"g5a-ex:oracle\u002Fretail_back_office@*":362},{"success":4,"data":5},true,{"product":6,"versions":188,"topVulnerabilitiesByEpss":273,"kevVulnerabilities":333,"seoMetadata":339,"meta":358},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":187},"oracle","retail_back_office",84,22,1,"2021-12-18",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,164,166,168,170,172,174,176,179,181,183,185],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"13.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.3",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.3.1",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.3.2",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.3.3",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.1",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.2",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.3",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.4",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.5",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.6",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.7",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.4.8",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.5",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.5.1",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.5.2",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.5.3",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.5.4",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.5.5",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.6",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.7",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.1",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.1.1",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.2",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.2.1",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.2.2",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.2.3",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.3",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.3.1",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.3.2",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.3.3",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.3.4",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.3.5",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.4",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.4.1",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.4.2",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.4.3",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.4.4",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.5",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.5.1",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.5.2",{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.6",{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.7",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.8",{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.9",{"version":113,"cve_count":11,"kev_count":16,"has_kev":17},"13.2",{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},"13.2.0.1",{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},"13.2.0.2",{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},"13.2.0.3",{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},"13.2.8",{"version":123,"cve_count":124,"kev_count":16,"has_kev":17},"13.3",2,{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.0.1",{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.3",{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.3.1",{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.3.2",{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.4",{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.5",{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.6",{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.8",{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},"13.3.8.1",{"version":144,"cve_count":124,"kev_count":16,"has_kev":17},"13.4",{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},"13.4.1",{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},"13.4.5",{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},"13.4.6",{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},"13.4.7",{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},"13.4.8",{"version":156,"cve_count":11,"kev_count":16,"has_kev":17},"13.4.9",{"version":158,"cve_count":16,"kev_count":16,"has_kev":17},"13.4.9.1",{"version":160,"cve_count":11,"kev_count":16,"has_kev":17},"14",{"version":162,"cve_count":163,"kev_count":16,"has_kev":17},"14.0",11,{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},"14.0.1",{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},"14.0.1.1",{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},"14.0.2",{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},"14.0.3",{"version":173,"cve_count":124,"kev_count":11,"has_kev":4},"14.0.4",{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},"14.0.4.1",{"version":177,"cve_count":178,"kev_count":16,"has_kev":17},"14.1",20,{"version":180,"cve_count":16,"kev_count":16,"has_kev":17},"14.1.1",{"version":182,"cve_count":16,"kev_count":16,"has_kev":17},"14.1.2",{"version":184,"cve_count":124,"kev_count":11,"has_kev":4},"14.1.3",{"version":186,"cve_count":16,"kev_count":16,"has_kev":17},"14.1.3.1","Retail Back Office by Oracle is a technology product with 84 tracked versions and 22 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},{"version":113,"cve_count":11,"kev_count":16,"has_kev":17},{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},{"version":123,"cve_count":124,"kev_count":16,"has_kev":17},{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},{"version":144,"cve_count":124,"kev_count":16,"has_kev":17},{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},{"version":156,"cve_count":11,"kev_count":16,"has_kev":17},{"version":158,"cve_count":16,"kev_count":16,"has_kev":17},{"version":160,"cve_count":11,"kev_count":16,"has_kev":17},{"version":162,"cve_count":163,"kev_count":16,"has_kev":17},{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},{"version":173,"cve_count":124,"kev_count":11,"has_kev":4},{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},{"version":177,"cve_count":178,"kev_count":16,"has_kev":17},{"version":180,"cve_count":16,"kev_count":16,"has_kev":17},{"version":182,"cve_count":16,"kev_count":16,"has_kev":17},{"version":184,"cve_count":124,"kev_count":11,"has_kev":4},{"version":186,"cve_count":16,"kev_count":16,"has_kev":17},[274,281,288,294,300,305,312,316,322,328],{"cveId":275,"description":276,"publishedDate":12,"cvssScore":277,"cvssVersion":278,"severity":279,"isKev":17,"epssScore":280},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":282,"description":283,"publishedDate":284,"cvssScore":285,"cvssVersion":278,"severity":286,"isKev":4,"epssScore":287},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,"High",0.99968,{"cveId":289,"description":290,"publishedDate":291,"cvssScore":292,"cvssVersion":278,"severity":279,"isKev":17,"epssScore":293},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,{"cveId":295,"description":296,"publishedDate":297,"cvssScore":298,"cvssVersion":278,"severity":286,"isKev":17,"epssScore":299},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,0.88768,{"cveId":301,"description":302,"publishedDate":303,"cvssScore":292,"cvssVersion":278,"severity":279,"isKev":17,"epssScore":304},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":306,"description":307,"publishedDate":308,"cvssScore":309,"cvssVersion":278,"severity":310,"isKev":17,"epssScore":311},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",9.8,"Critical",0.77476,{"cveId":313,"description":314,"publishedDate":308,"cvssScore":277,"cvssVersion":278,"severity":279,"isKev":17,"epssScore":315},"CVE-2018-1271","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.",0.34444,{"cveId":317,"description":318,"publishedDate":319,"cvssScore":320,"cvssVersion":278,"severity":286,"isKev":17,"epssScore":321},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,0.28384,{"cveId":323,"description":324,"publishedDate":325,"cvssScore":309,"cvssVersion":326,"severity":310,"isKev":17,"epssScore":327},"CVE-2018-8013","In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","2018-05-24","v3.0",0.18925,{"cveId":329,"description":330,"publishedDate":331,"cvssScore":309,"cvssVersion":278,"severity":310,"isKev":17,"epssScore":332},"CVE-2019-13990","initDocumentParser in xml\u002FXMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","2019-07-26",0.16628,[334],{"cveId":282,"description":283,"publishedDate":284,"cvssScore":285,"severity":286,"isKev":4,"epssScore":287,"cisaVulnName":335,"cisaDateAdded":336,"cisaShortDescription":337,"cisaRequiredAction":338},"Apache Tomcat Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","Apply updates per vendor instructions.",{"title":340,"metaDescription":341,"keywords":342,"structuredData":343},"Retail Back Office by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Retail Back Office by Oracle covering 84 versions with 22 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Retail Back Office vulnerabilities, Retail Back Office security, Retail Back Office CVE, Oracle Retail Back Office, Retail Back Office threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Retail Back Office KEV, Retail Back Office exploited vulnerabilities",{"@context":344,"@type":345,"name":346,"description":341,"url":347,"manufacturer":348,"applicationCategory":352,"softwareVersion":353,"mainEntity":354},"https:\u002F\u002Fschema.org","SoftwareApplication","Retail Back Office","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fretail_back_office",{"@type":349,"name":350,"url":351},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","84 versions tracked",{"@type":355,"name":356,"description":357,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Retail Back Office Security Vulnerabilities","Security vulnerabilities affecting Retail Back Office by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":359,"apiVersion":360},"2026-10-17T19:18:08.673Z","3.0",[],{"rows":363,"total":11,"capped":17,"failed":16},[364],{"cveId":282,"name":335,"severity":286,"cvss":285,"added":336,"epss":287,"published":365,"ranges":366,"checked":4,"hits":367,"covers":17},"2017-10-04T01:29:02.12",[173,184],[]]