[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0wAEh67O_Ar7p50kXCVpBdSYRHfX1Lm1cG5zR19Dv1g":3,"g5a-family:oracle\u002Fretail_integration_bus":210,"g5a-ex:oracle\u002Fretail_integration_bus@*":211},{"success":4,"data":5},true,{"product":6,"versions":91,"topVulnerabilitiesByEpss":124,"kevVulnerabilities":182,"seoMetadata":188,"meta":207},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":90},"oracle","retail_integration_bus",32,39,1,"2022-04-01",[14,19,22,25,27,29,31,33,35,37,40,42,44,47,49,51,54,57,59,61,63,66,69,71,73,75,77,80,82,84,86,88],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"13.0",4,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"13.1",2,{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},"13.2",3,{"version":26,"cve_count":21,"kev_count":17,"has_kev":18},"14.0",{"version":28,"cve_count":11,"kev_count":17,"has_kev":18},"14.0.0",{"version":30,"cve_count":24,"kev_count":17,"has_kev":18},"14.0.1",{"version":32,"cve_count":24,"kev_count":17,"has_kev":18},"14.0.2",{"version":34,"cve_count":24,"kev_count":17,"has_kev":18},"14.0.3",{"version":36,"cve_count":24,"kev_count":17,"has_kev":18},"14.0.4",{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},"14.1",7,{"version":41,"cve_count":11,"kev_count":17,"has_kev":18},"14.1.0",{"version":43,"cve_count":24,"kev_count":17,"has_kev":18},"14.1.1",{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},"14.1.2",5,{"version":48,"cve_count":46,"kev_count":17,"has_kev":18},"14.1.3",{"version":50,"cve_count":21,"kev_count":17,"has_kev":18},"14.1.3.0",{"version":52,"cve_count":53,"kev_count":11,"has_kev":4},"14.1.3.2",11,{"version":55,"cve_count":56,"kev_count":17,"has_kev":18},"15.0",16,{"version":58,"cve_count":24,"kev_count":17,"has_kev":18},"15.0.0.1",{"version":60,"cve_count":24,"kev_count":17,"has_kev":18},"15.0.1",{"version":62,"cve_count":24,"kev_count":17,"has_kev":18},"15.0.2",{"version":64,"cve_count":65,"kev_count":17,"has_kev":18},"15.0.3",6,{"version":67,"cve_count":68,"kev_count":11,"has_kev":4},"15.0.3.1",8,{"version":70,"cve_count":24,"kev_count":17,"has_kev":18},"15.0.4.0",{"version":72,"cve_count":56,"kev_count":17,"has_kev":18},"16.0",{"version":74,"cve_count":24,"kev_count":17,"has_kev":18},"16.0.1",{"version":76,"cve_count":24,"kev_count":17,"has_kev":18},"16.0.2",{"version":78,"cve_count":79,"kev_count":11,"has_kev":4},"16.0.3",9,{"version":81,"cve_count":24,"kev_count":17,"has_kev":18},"16.0.3.0",{"version":83,"cve_count":11,"kev_count":17,"has_kev":18},"17.0",{"version":85,"cve_count":24,"kev_count":17,"has_kev":18},"19.0.0",{"version":87,"cve_count":68,"kev_count":11,"has_kev":4},"19.0.1",{"version":89,"cve_count":24,"kev_count":17,"has_kev":18},"19.0.1.0","Retail Integration Bus by Oracle is a technology product with 32 tracked versions and 39 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},{"version":26,"cve_count":21,"kev_count":17,"has_kev":18},{"version":28,"cve_count":11,"kev_count":17,"has_kev":18},{"version":30,"cve_count":24,"kev_count":17,"has_kev":18},{"version":32,"cve_count":24,"kev_count":17,"has_kev":18},{"version":34,"cve_count":24,"kev_count":17,"has_kev":18},{"version":36,"cve_count":24,"kev_count":17,"has_kev":18},{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},{"version":41,"cve_count":11,"kev_count":17,"has_kev":18},{"version":43,"cve_count":24,"kev_count":17,"has_kev":18},{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},{"version":48,"cve_count":46,"kev_count":17,"has_kev":18},{"version":50,"cve_count":21,"kev_count":17,"has_kev":18},{"version":52,"cve_count":53,"kev_count":11,"has_kev":4},{"version":55,"cve_count":56,"kev_count":17,"has_kev":18},{"version":58,"cve_count":24,"kev_count":17,"has_kev":18},{"version":60,"cve_count":24,"kev_count":17,"has_kev":18},{"version":62,"cve_count":24,"kev_count":17,"has_kev":18},{"version":64,"cve_count":65,"kev_count":17,"has_kev":18},{"version":67,"cve_count":68,"kev_count":11,"has_kev":4},{"version":70,"cve_count":24,"kev_count":17,"has_kev":18},{"version":72,"cve_count":56,"kev_count":17,"has_kev":18},{"version":74,"cve_count":24,"kev_count":17,"has_kev":18},{"version":76,"cve_count":24,"kev_count":17,"has_kev":18},{"version":78,"cve_count":79,"kev_count":11,"has_kev":4},{"version":81,"cve_count":24,"kev_count":17,"has_kev":18},{"version":83,"cve_count":11,"kev_count":17,"has_kev":18},{"version":85,"cve_count":24,"kev_count":17,"has_kev":18},{"version":87,"cve_count":68,"kev_count":11,"has_kev":4},{"version":89,"cve_count":24,"kev_count":17,"has_kev":18},[125,133,139,144,151,156,160,166,172,177],{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":130,"severity":131,"isKev":18,"epssScore":132},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":134,"description":135,"publishedDate":12,"cvssScore":136,"cvssVersion":130,"severity":137,"isKev":4,"epssScore":138},"CVE-2022-22965","A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.",9.8,"Critical",0.99638,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":136,"cvssVersion":130,"severity":137,"isKev":18,"epssScore":143},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",0.89792,{"cveId":145,"description":146,"publishedDate":147,"cvssScore":148,"cvssVersion":130,"severity":149,"isKev":18,"epssScore":150},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,"High",0.88768,{"cveId":152,"description":153,"publishedDate":154,"cvssScore":136,"cvssVersion":130,"severity":137,"isKev":18,"epssScore":155},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",0.77476,{"cveId":157,"description":158,"publishedDate":154,"cvssScore":129,"cvssVersion":130,"severity":131,"isKev":18,"epssScore":159},"CVE-2018-1271","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.",0.34444,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"cvssVersion":130,"severity":149,"isKev":18,"epssScore":165},"CVE-2020-13936","An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload\u002Fmodify velocity templates running Apache Velocity Engine versions up to 2.2.","2021-03-10",8.8,0.22709,{"cveId":167,"description":168,"publishedDate":169,"cvssScore":136,"cvssVersion":170,"severity":137,"isKev":18,"epssScore":171},"CVE-2018-8013","In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","2018-05-24","v3.0",0.18925,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":136,"cvssVersion":130,"severity":137,"isKev":18,"epssScore":176},"CVE-2019-13990","initDocumentParser in xml\u002FXMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","2019-07-26",0.16628,{"cveId":178,"description":179,"publishedDate":180,"cvssScore":148,"cvssVersion":130,"severity":149,"isKev":18,"epssScore":181},"CVE-2019-12402","The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.","2019-08-30",0.16157,[183],{"cveId":134,"description":135,"publishedDate":12,"cvssScore":136,"severity":137,"isKev":4,"epssScore":138,"cisaVulnName":184,"cisaDateAdded":185,"cisaShortDescription":186,"cisaRequiredAction":187},"Spring Framework JDK 9+ Remote Code Execution Vulnerability","2022-04-04","Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.","Apply updates per vendor instructions.",{"title":189,"metaDescription":190,"keywords":191,"structuredData":192},"Retail Integration Bus by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Retail Integration Bus by Oracle covering 32 versions with 39 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Retail Integration Bus vulnerabilities, Retail Integration Bus security, Retail Integration Bus CVE, Oracle Retail Integration Bus, Retail Integration Bus threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Retail Integration Bus KEV, Retail Integration Bus exploited vulnerabilities",{"@context":193,"@type":194,"name":195,"description":190,"url":196,"manufacturer":197,"applicationCategory":201,"softwareVersion":202,"mainEntity":203},"https:\u002F\u002Fschema.org","SoftwareApplication","Retail Integration Bus","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fretail_integration_bus",{"@type":198,"name":199,"url":200},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","32 versions tracked",{"@type":204,"name":205,"description":206,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Retail Integration Bus Security Vulnerabilities","Security vulnerabilities affecting Retail Integration Bus by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":208,"apiVersion":209},"2026-10-17T18:13:23.921Z","3.0",[],{"rows":212,"total":11,"capped":18,"failed":17},[213],{"cveId":134,"name":184,"severity":137,"cvss":136,"added":185,"epss":138,"published":214,"ranges":215,"checked":4,"hits":216,"covers":18},"2022-04-01T23:15:13.87",[52,67,78,87],[]]