[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiSu30XF5cgQ4tAjw7ayiYbdB09D7FNHwnZwDxd_5Dn4":3,"g5a-family:oracle\u002Fretail_customer_management_and_segmentation_foundation":134,"g5a-ex:oracle\u002Fretail_customer_management_and_segmentation_foundation@*":135},{"success":4,"data":5},true,{"product":6,"versions":38,"topVulnerabilitiesByEpss":47,"kevVulnerabilities":106,"seoMetadata":112,"meta":131},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":37},"oracle","retail_customer_management_and_segmentation_foundation",8,57,1,"2022-04-01",[14,19,21,23,26,28,31,34],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"16.0",11,0,false,{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},"16.0.1",{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},"16.0.2",{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},"17.0",18,{"version":27,"cve_count":11,"kev_count":17,"has_kev":18},"17.0.1",{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},"18.0",12,{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},"18.1",2,{"version":35,"cve_count":36,"kev_count":11,"has_kev":4},"19.0",14,"Retail Customer Management And Segmentation Foundation by Oracle is a technology product with 8 tracked versions and 57 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[39,40,41,42,43,44,45,46],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},{"version":27,"cve_count":11,"kev_count":17,"has_kev":18},{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":11,"has_kev":4},[48,55,62,67,74,80,85,90,96,101],{"cveId":49,"description":50,"publishedDate":12,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":4,"epssScore":54},"CVE-2022-22965","A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.",9.8,"v3.1","Critical",0.99638,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":52,"severity":60,"isKev":18,"epssScore":61},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,"Medium",0.99215,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":59,"cvssVersion":52,"severity":60,"isKev":18,"epssScore":66},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":52,"severity":72,"isKev":18,"epssScore":73},"CVE-2021-23337","Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.","2021-02-15",7.2,"High",0.21333,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":52,"severity":72,"isKev":18,"epssScore":79},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":18,"epssScore":84},"CVE-2018-14718","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.","2019-01-02",0.12679,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":78,"cvssVersion":52,"severity":72,"isKev":18,"epssScore":89},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":52,"severity":60,"isKev":18,"epssScore":95},"CVE-2020-5421","In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","2020-09-19",6.5,0.11564,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":18,"epssScore":100},"CVE-2019-14540","A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.","2019-09-15",0.10763,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":52,"severity":72,"isKev":18,"epssScore":100},"CVE-2019-14439","A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.","2019-07-30",7.5,[107],{"cveId":49,"description":50,"publishedDate":12,"cvssScore":51,"severity":53,"isKev":4,"epssScore":54,"cisaVulnName":108,"cisaDateAdded":109,"cisaShortDescription":110,"cisaRequiredAction":111},"Spring Framework JDK 9+ Remote Code Execution Vulnerability","2022-04-04","Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.","Apply updates per vendor instructions.",{"title":113,"metaDescription":114,"keywords":115,"structuredData":116},"Retail Customer Management And Segmentation Foundation by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Retail Customer Management And Segmentation Foundation by Oracle covering 8 versions with 57 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Retail Customer Management And Segmentation Foundation vulnerabilities, Retail Customer Management And Segmentation Foundation security, Retail Customer Management And Segmentation Foundation CVE, Oracle Retail Customer Management And Segmentation Foundation, Retail Customer Management And Segmentation Foundation threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Retail Customer Management And Segmentation Foundation KEV, Retail Customer Management And Segmentation Foundation exploited vulnerabilities",{"@context":117,"@type":118,"name":119,"description":114,"url":120,"manufacturer":121,"applicationCategory":125,"softwareVersion":126,"mainEntity":127},"https:\u002F\u002Fschema.org","SoftwareApplication","Retail Customer Management And Segmentation Foundation","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fretail_customer_management_and_segmentation_foundation",{"@type":122,"name":123,"url":124},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","8 versions tracked",{"@type":128,"name":129,"description":130,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Retail Customer Management And Segmentation Foundation Security Vulnerabilities","Security vulnerabilities affecting Retail Customer Management And Segmentation Foundation by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":132,"apiVersion":133},"2026-10-17T19:23:33.654Z","3.0",[],{"rows":136,"total":11,"capped":18,"failed":17},[137],{"cveId":49,"name":108,"severity":53,"cvss":51,"added":109,"epss":54,"published":138,"ranges":139,"checked":4,"hits":140,"covers":18},"2022-04-01T23:15:13.87",[24,29,35],[]]