[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPckgUVxPfbZc6hZ1rnXlfxdmRbzUgLobGE4givyv0B8":3,"g5a-family:oracle\u002Fretail_point-of-service":220,"g5a-ex:oracle\u002Fretail_point-of-service@*":221},{"success":4,"data":5},true,{"product":6,"versions":92,"topVulnerabilitiesByEpss":129,"kevVulnerabilities":192,"seoMetadata":198,"meta":217},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":91},"oracle","retail_point-of-service",36,18,1,"2021-12-18",[14,18,21,23,26,28,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"13.3.8",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"13.4",2,{"version":22,"cve_count":11,"kev_count":16,"has_kev":17},"13.4.9",{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},"14.0",7,{"version":27,"cve_count":20,"kev_count":11,"has_kev":4},"14.0.4",{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},"14.1",15,{"version":32,"cve_count":20,"kev_count":11,"has_kev":4},"14.1.3",{"version":34,"cve_count":11,"kev_count":16,"has_kev":17},"15.0",{"version":36,"cve_count":11,"kev_count":16,"has_kev":17},"15.0.0",{"version":38,"cve_count":11,"kev_count":16,"has_kev":17},"15.0.1",{"version":40,"cve_count":11,"kev_count":16,"has_kev":17},"16.0",{"version":42,"cve_count":11,"kev_count":16,"has_kev":17},"16.0.0",{"version":44,"cve_count":11,"kev_count":16,"has_kev":17},"16.0.0.1",{"version":46,"cve_count":11,"kev_count":16,"has_kev":17},"16.0.1",{"version":48,"cve_count":11,"kev_count":16,"has_kev":17},"16.0.2",{"version":50,"cve_count":11,"kev_count":16,"has_kev":17},"6.0.0",{"version":52,"cve_count":11,"kev_count":16,"has_kev":17},"6.0.10",{"version":54,"cve_count":11,"kev_count":16,"has_kev":17},"6.0.11",{"version":56,"cve_count":11,"kev_count":16,"has_kev":17},"6.5.0",{"version":58,"cve_count":11,"kev_count":16,"has_kev":17},"6.5.10",{"version":60,"cve_count":11,"kev_count":16,"has_kev":17},"6.5.11",{"version":62,"cve_count":11,"kev_count":16,"has_kev":17},"6.5.4",{"version":64,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.0",{"version":66,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.1",{"version":68,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.2",{"version":70,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.3",{"version":72,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.4",{"version":74,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.5",{"version":76,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.6",{"version":78,"cve_count":11,"kev_count":16,"has_kev":17},"7.1.0",{"version":80,"cve_count":11,"kev_count":16,"has_kev":17},"7.1.1",{"version":82,"cve_count":11,"kev_count":16,"has_kev":17},"7.1.2",{"version":84,"cve_count":11,"kev_count":16,"has_kev":17},"7.1.3",{"version":86,"cve_count":11,"kev_count":16,"has_kev":17},"7.1.4",{"version":88,"cve_count":11,"kev_count":16,"has_kev":17},"7.1.5",{"version":90,"cve_count":11,"kev_count":16,"has_kev":17},"7.1.6","Retail Point-of-service by Oracle is a technology product with 36 tracked versions and 18 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":11,"kev_count":16,"has_kev":17},{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},{"version":27,"cve_count":20,"kev_count":11,"has_kev":4},{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},{"version":32,"cve_count":20,"kev_count":11,"has_kev":4},{"version":34,"cve_count":11,"kev_count":16,"has_kev":17},{"version":36,"cve_count":11,"kev_count":16,"has_kev":17},{"version":38,"cve_count":11,"kev_count":16,"has_kev":17},{"version":40,"cve_count":11,"kev_count":16,"has_kev":17},{"version":42,"cve_count":11,"kev_count":16,"has_kev":17},{"version":44,"cve_count":11,"kev_count":16,"has_kev":17},{"version":46,"cve_count":11,"kev_count":16,"has_kev":17},{"version":48,"cve_count":11,"kev_count":16,"has_kev":17},{"version":50,"cve_count":11,"kev_count":16,"has_kev":17},{"version":52,"cve_count":11,"kev_count":16,"has_kev":17},{"version":54,"cve_count":11,"kev_count":16,"has_kev":17},{"version":56,"cve_count":11,"kev_count":16,"has_kev":17},{"version":58,"cve_count":11,"kev_count":16,"has_kev":17},{"version":60,"cve_count":11,"kev_count":16,"has_kev":17},{"version":62,"cve_count":11,"kev_count":16,"has_kev":17},{"version":64,"cve_count":11,"kev_count":16,"has_kev":17},{"version":66,"cve_count":11,"kev_count":16,"has_kev":17},{"version":68,"cve_count":11,"kev_count":16,"has_kev":17},{"version":70,"cve_count":11,"kev_count":16,"has_kev":17},{"version":72,"cve_count":11,"kev_count":16,"has_kev":17},{"version":74,"cve_count":11,"kev_count":16,"has_kev":17},{"version":76,"cve_count":11,"kev_count":16,"has_kev":17},{"version":78,"cve_count":11,"kev_count":16,"has_kev":17},{"version":80,"cve_count":11,"kev_count":16,"has_kev":17},{"version":82,"cve_count":11,"kev_count":16,"has_kev":17},{"version":84,"cve_count":11,"kev_count":16,"has_kev":17},{"version":86,"cve_count":11,"kev_count":16,"has_kev":17},{"version":88,"cve_count":11,"kev_count":16,"has_kev":17},{"version":90,"cve_count":11,"kev_count":16,"has_kev":17},[130,137,144,150,156,162,170,175,181,186],{"cveId":131,"description":132,"publishedDate":12,"cvssScore":133,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":136},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":141,"cvssVersion":134,"severity":142,"isKev":4,"epssScore":143},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,"High",0.99968,{"cveId":145,"description":146,"publishedDate":147,"cvssScore":148,"cvssVersion":134,"severity":142,"isKev":17,"epssScore":149},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,0.88768,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":155},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,0.8682,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":160,"cvssVersion":134,"severity":142,"isKev":17,"epssScore":161},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,0.28384,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"cvssVersion":167,"severity":168,"isKev":17,"epssScore":169},"CVE-2018-8013","In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","2018-05-24",9.8,"v3.0","Critical",0.18925,{"cveId":171,"description":172,"publishedDate":173,"cvssScore":166,"cvssVersion":134,"severity":168,"isKev":17,"epssScore":174},"CVE-2019-13990","initDocumentParser in xml\u002FXMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","2019-07-26",0.16628,{"cveId":176,"description":177,"publishedDate":178,"cvssScore":179,"cvssVersion":134,"severity":142,"isKev":17,"epssScore":180},"CVE-2020-11987","Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2021-02-24",8.2,0.1328,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":148,"cvssVersion":134,"severity":142,"isKev":17,"epssScore":185},"CVE-2019-17566","Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the \"xlink:href\" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2020-11-12",0.10867,{"cveId":187,"description":188,"publishedDate":189,"cvssScore":190,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":191},"CVE-2021-36374","When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.","2021-07-14",5.5,0.0263,[193],{"cveId":138,"description":139,"publishedDate":140,"cvssScore":141,"severity":142,"isKev":4,"epssScore":143,"cisaVulnName":194,"cisaDateAdded":195,"cisaShortDescription":196,"cisaRequiredAction":197},"Apache Tomcat Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","Apply updates per vendor instructions.",{"title":199,"metaDescription":200,"keywords":201,"structuredData":202},"Retail Point-of-service by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Retail Point-of-service by Oracle covering 36 versions with 18 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Retail Point-of-service vulnerabilities, Retail Point-of-service security, Retail Point-of-service CVE, Oracle Retail Point-of-service, Retail Point-of-service threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Retail Point-of-service KEV, Retail Point-of-service exploited vulnerabilities",{"@context":203,"@type":204,"name":205,"description":200,"url":206,"manufacturer":207,"applicationCategory":211,"softwareVersion":212,"mainEntity":213},"https:\u002F\u002Fschema.org","SoftwareApplication","Retail Point-of-service","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fretail_point-of-service",{"@type":208,"name":209,"url":210},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","36 versions tracked",{"@type":214,"name":215,"description":216,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Retail Point-of-service Security Vulnerabilities","Security vulnerabilities affecting Retail Point-of-service by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":218,"apiVersion":219},"2026-10-17T19:18:08.679Z","3.0",[],{"rows":222,"total":11,"capped":17,"failed":16},[223],{"cveId":138,"name":194,"severity":142,"cvss":141,"added":195,"epss":143,"published":224,"ranges":225,"checked":4,"hits":226,"covers":17},"2017-10-04T01:29:02.12",[27,32],[]]