[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foCrA-XdONSg-PnTh_kcr2tgr1ex1v6CeVC4iZ2NJzTA":3,"g5a-ex:oracle\u002Fretail_service_backbone@*":168,"g5a-family:oracle\u002Fretail_service_backbone":170},{"success":4,"data":5},true,{"product":6,"versions":64,"topVulnerabilitiesByEpss":84,"kevVulnerabilities":145,"seoMetadata":146,"meta":165},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":63},"oracle","retail_service_backbone",19,45,0,"2022-01-24",[14,18,20,22,25,28,30,33,36,39,41,43,45,48,50,53,56,58,60],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"13.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"13.1",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"13.2",{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},"14.0",3,{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"14.1",15,{"version":29,"cve_count":24,"kev_count":11,"has_kev":17},"14.1.3",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"14.1.3.0",2,{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},"14.1.3.2",22,{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"15.0",20,{"version":40,"cve_count":32,"kev_count":11,"has_kev":17},"15.0.3",{"version":42,"cve_count":9,"kev_count":11,"has_kev":17},"15.0.3.1",{"version":44,"cve_count":24,"kev_count":11,"has_kev":17},"15.0.4.0",{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},"16.0",17,{"version":49,"cve_count":32,"kev_count":11,"has_kev":17},"16.0.1",{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},"16.0.3",7,{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},"16.0.3.0",14,{"version":57,"cve_count":24,"kev_count":11,"has_kev":17},"19.0.0",{"version":59,"cve_count":52,"kev_count":11,"has_kev":17},"19.0.1",{"version":61,"cve_count":62,"kev_count":11,"has_kev":17},"19.0.1.0",4,"Retail Service Backbone by Oracle is a technology product with 19 tracked versions and 45 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":24,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},{"version":40,"cve_count":32,"kev_count":11,"has_kev":17},{"version":42,"cve_count":9,"kev_count":11,"has_kev":17},{"version":44,"cve_count":24,"kev_count":11,"has_kev":17},{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},{"version":49,"cve_count":32,"kev_count":11,"has_kev":17},{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},{"version":57,"cve_count":24,"kev_count":11,"has_kev":17},{"version":59,"cve_count":52,"kev_count":11,"has_kev":17},{"version":61,"cve_count":62,"kev_count":11,"has_kev":17},[85,93,100,107,112,118,124,129,135,140],{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":90,"severity":91,"isKev":17,"epssScore":92},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":99},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"Critical",0.89792,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":90,"severity":105,"isKev":17,"epssScore":106},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,"High",0.88768,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":97,"cvssVersion":90,"severity":98,"isKev":17,"epssScore":111},"CVE-2019-17571","Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.","2019-12-20",0.6998,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":97,"cvssVersion":116,"severity":98,"isKev":17,"epssScore":117},"CVE-2015-3253","The MethodClosure class in runtime\u002FMethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.","2015-08-13","v3.0",0.41032,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":122,"cvssVersion":90,"severity":105,"isKev":17,"epssScore":123},"CVE-2020-13936","An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload\u002Fmodify velocity templates running Apache Velocity Engine versions up to 2.2.","2021-03-10",8.8,0.22709,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":104,"cvssVersion":90,"severity":105,"isKev":17,"epssScore":128},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",0.17714,{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":90,"severity":105,"isKev":17,"epssScore":134},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":133,"cvssVersion":90,"severity":105,"isKev":17,"epssScore":139},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":141,"description":142,"publishedDate":12,"cvssScore":143,"cvssVersion":90,"severity":91,"isKev":17,"epssScore":144},"CVE-2022-23437","There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.",6.5,0.11615,[],{"title":147,"metaDescription":148,"keywords":149,"structuredData":150},"Retail Service Backbone by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Retail Service Backbone by Oracle covering 19 versions with 45 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Retail Service Backbone vulnerabilities, Retail Service Backbone security, Retail Service Backbone CVE, Oracle Retail Service Backbone, Retail Service Backbone threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":151,"@type":152,"name":153,"description":148,"url":154,"manufacturer":155,"applicationCategory":159,"softwareVersion":160,"mainEntity":161},"https:\u002F\u002Fschema.org","SoftwareApplication","Retail Service Backbone","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fretail_service_backbone",{"@type":156,"name":157,"url":158},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","19 versions tracked",{"@type":162,"name":163,"description":164,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Retail Service Backbone Security Vulnerabilities","Security vulnerabilities affecting Retail Service Backbone by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":166,"apiVersion":167},"2026-10-17T12:49:16.777Z","3.0",{"rows":169,"total":11,"capped":17,"failed":11},[],[]]