[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXL92HVkAFABJVlds6YYJfJ4eTHtEbGzZs_Ztt-wFgdo":3,"g5a-ex:oracle\u002Fretail_convenience_and_fuel_pos_software@*":87,"g5a-family:oracle\u002Fretail_convenience_and_fuel_pos_software":95},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":56,"seoMetadata":65,"meta":84},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":20},"oracle","retail_convenience_and_fuel_pos_software",2,5,"2018-10-17",[13,15],{"version":14,"cve_count":9,"kev_count":9,"has_kev":4},"2.1.132",{"version":16,"cve_count":17,"kev_count":18,"has_kev":19},"2.8.1",3,0,false,"Retail Convenience And Fuel Pos Software by Oracle is a technology product with 2 tracked versions and 5 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":14,"cve_count":9,"kev_count":9,"has_kev":4},{"version":16,"cve_count":17,"kev_count":18,"has_kev":19},[25,33,40,45,52],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":32},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,"v3.1","High",0.99968,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":30,"severity":38,"isKev":4,"epssScore":39},"CVE-2016-8735","Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","2017-04-06",9.8,"Critical",0.90338,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":37,"cvssVersion":30,"severity":38,"isKev":19,"epssScore":44},"CVE-2018-1000613","Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS\u002FXMSS^MT private key deserialization that can result in Deserializing an XMSS\u002FXMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.","2018-07-09",0.04767,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":50,"severity":31,"isKev":19,"epssScore":51},"CVE-2018-1000180","Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","2018-06-05",7.5,"v3.0",0.0342,{"cveId":53,"description":54,"publishedDate":11,"cvssScore":49,"cvssVersion":50,"severity":31,"isKev":19,"epssScore":55},"CVE-2018-3246","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).",0.02946,[57,62],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":38,"isKev":4,"epssScore":39,"cisaVulnName":58,"cisaDateAdded":59,"cisaShortDescription":60,"cisaRequiredAction":61},"Apache Tomcat Remote Code Execution Vulnerability","2023-05-12","Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.","Apply updates per vendor instructions.",{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":58,"cisaDateAdded":63,"cisaShortDescription":64,"cisaRequiredAction":61},"2022-03-25","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"title":66,"metaDescription":67,"keywords":68,"structuredData":69},"Retail Convenience And Fuel Pos Software by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Retail Convenience And Fuel Pos Software by Oracle covering 2 versions with 5 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Retail Convenience And Fuel Pos Software vulnerabilities, Retail Convenience And Fuel Pos Software security, Retail Convenience And Fuel Pos Software CVE, Oracle Retail Convenience And Fuel Pos Software, Retail Convenience And Fuel Pos Software threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Retail Convenience And Fuel Pos Software KEV, Retail Convenience And Fuel Pos Software exploited vulnerabilities",{"@context":70,"@type":71,"name":72,"description":67,"url":73,"manufacturer":74,"applicationCategory":78,"softwareVersion":79,"mainEntity":80},"https:\u002F\u002Fschema.org","SoftwareApplication","Retail Convenience And Fuel Pos Software","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fretail_convenience_and_fuel_pos_software",{"@type":75,"name":76,"url":77},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","2 versions tracked",{"@type":81,"name":82,"description":83,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Retail Convenience And Fuel Pos Software Security Vulnerabilities","Security vulnerabilities affecting Retail Convenience And Fuel Pos Software by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":85,"apiVersion":86},"2026-10-17T15:07:21.479Z","3.0",{"rows":88,"total":9,"capped":19,"failed":9},[89,92],{"cveId":34,"name":58,"severity":38,"cvss":37,"added":59,"epss":39,"published":36,"ranges":90,"hits":91,"checked":19,"covers":19},[],[],{"cveId":26,"name":58,"severity":31,"cvss":29,"added":63,"epss":32,"published":28,"ranges":93,"hits":94,"checked":19,"covers":19},[],[],[]]