Oracle Retail Order Broker Cloud Service vulnerabilities

6 CVEs affecting Oracle Retail Order Broker Cloud Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-13954, published 2020-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3253, published 2015-08-13. Critical severity, CVSS 9.8. EPSS: 41% chance of exploitation in the next 30 days. The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized…
CVE-2020-13954, published 2020-11-12. Medium severity, CVSS 6.1. EPSS: 40.9% chance of exploitation in the next 30 days. By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the…
CVE-2020-9488, published 2020-04-27. Low severity, CVSS 3.7. EPSS: 8.2% chance of exploitation in the next 30 days. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log…
CVE-2016-0635, published 2016-07-21. High severity, CVSS 8.8. EPSS: 5.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component…
CVE-2016-0500, published 2016-01-21. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Order Broker Cloud Service component in Oracle Retail Applications 4.0 and 4.1 allows remote attackers to affect confidentiality, integrity, and…
CVE-2016-3611, published 2016-07-21. Medium severity, CVSS 5.4. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System…