CVE-2018-1271
Estado: ModificadaMedia (5.9)—
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 34%
- Percentil entre todas las CVEs puntuadas: 98
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (28)
Oracle — Application Testing SuiteOracle — BIG Data DiscoveryOracle — Communications Converged Application ServerOracle — Communications Diameter Signaling RouterOracle — Communications Performance Intelligence CenterOracle — Communications Policy ManagementOracle — Communications Services GatekeeperOracle — Enterprise Manager OPS CenterOracle — Goldengate FOR BIG DataOracle — Health Sciences Information ManagerOracle — Healthcare Master Person IndexOracle — Insurance Calculation EngineOracle — Insurance Rules PaletteOracle — Primavera GatewayOracle — Rapid PlanningOracle — Retail Back OfficeOracle — Retail Central OfficeOracle — Retail Customer InsightsOracle — Retail Integration BUSOracle — Retail Open Commerce PlatformOracle — Retail Order BrokerOracle — Retail Point-of-saleOracle — Retail Predictive Application ServerOracle — Retail Returns ManagementOracle — Retail Xstore Point OF ServiceOracle — Service Architecture Leveraging TuxedoOracle — Tape Library AcslsVmware — Spring Framework
CWE
- CWE-22
- CWE-22
Referencias
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- http://www.securityfocus.com/bid/103699
- https://access.redhat.com/errata/RHSA-2018:1320
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2018:2939
- https://pivotal.io/security/cve-2018-1271
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- http://www.securityfocus.com/bid/103699
- https://access.redhat.com/errata/RHSA-2018:1320
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2018:2939
- https://pivotal.io/security/cve-2018-1271
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-1271",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.9,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "security_alert@emc.com",
"affectedData": [
{
"vendor": "Spring by Pivotal",
"product": "Spring Framework",
"versions": [
{
"status": "affected",
"version": "Versions prior to 5.0.5 and 4.3.15"
}
]
}
]
}
],
"published": "2018-04-06T13:29:00.500",
"references": [
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "http://www.securityfocus.com/bid/103699",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "security_alert@emc.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:1320",
"tags": [
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:2669",
"tags": [
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:2939",
"tags": [
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://pivotal.io/security/cve-2018-1271",
"tags": [
"Vendor Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/security-alerts/cpujul2020.html",
"tags": [
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"tags": [
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/103699",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:1320",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:2669",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://access.redhat.com/errata/RHSA-2018:2939",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://pivotal.io/security/cve-2018-1271",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/security-alerts/cpujul2020.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "security_alert@emc.com",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
},
{
"type": "Secondary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack."
},
{
"lang": "es",
"value": "Spring Framework, en versiones 5.0 anteriores a la 5.0.5 y versiones 4.3 anteriores a la 4.3.15, así como versiones más antiguas no soportadas, permite que las aplicaciones configuren Spring MVC para que sirva recursos estáticos (por ejemplo, CSS, JS o imágenes). Cuando se sirven recursos estáticos desde un sistema de archivos en Windows (en contraposición a classpath o a ServletContext), un usuario malicioso puede enviar una petición mediante una URL especialmente manipulada que puede llevar a un ataque de salto de directorio."
}
],
"lastModified": "2026-06-17T01:50:53.183",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD987888-3DB7-4BE3-A830-9F915F3C81DF",
"versionEndExcluding": "4.3.15",
"versionStartIncluding": "4.3.0"
},
{
"criteria": "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D2CC334-AFF8-41D4-9FBD-88C8FF9DA406",
"versionEndExcluding": "5.0.5",
"versionStartIncluding": "5.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17EA8B91-7634-4636-B647-1049BA7CA088"
},
{
"criteria": "cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B4DF46F-DBCC-41F2-A260-F83A14838F23"
},
{
"criteria": "cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10F17843-32EA-4C31-B65C-F424447BEF7B"
},
{
"criteria": "cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A125E817-F974-4509-872C-B71933F42AD1"
},
{
"criteria": "cpe:2.3:a:oracle:big_data_discovery:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00280604-1DC1-4974-BF73-216C5D76FFA3"
},
{
"criteria": "cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC361999-AAD8-4CB3-B00E-E3990C3529B4",
"versionEndExcluding": "7.0.0.1"
},
{
"criteria": "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF5A0F0D-313D-4F5C-AD6D-8C118D5CD8D8",
"versionEndExcluding": "8.3"
},
{
"criteria": "cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "468931C8-C76A-4E47-BF00-185D85F719C5",
"versionEndExcluding": "10.2.1"
},
{
"criteria": "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5312AC7A-3C16-4967-ACA6-317289A749D0"
},
{
"criteria": "cpe:2.3:a:oracle:communications_services_gatekeeper:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97C1FA4C-5163-420C-A01A-EA36F1039BBB",
"versionEndExcluding": "6.1.0.4.0"
},
{
"criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE12B6A4-E128-41EC-8017-558F50B961BE"
},
{
"criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"
},
{
"criteria": "cpe:2.3:a:oracle:goldengate_for_big_data:12.2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C4A89F2-713D-4A36-9D28-22748D30E0FD"
},
{
"criteria": "cpe:2.3:a:oracle:goldengate_for_big_data:12.3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDFABB2C-2FA2-4F83-985B-7FCEAF274418"
},
{
"criteria": "cpe:2.3:a:oracle:goldengate_for_big_data:12.3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A609003-8687-40B4-8AC3-06A1534ADE30"
},
{
"criteria": "cpe:2.3:a:oracle:health_sciences_information_manager:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9027528A-4FE7-4E3C-B2DF-CCCED22128F5"
},
{
"criteria": "cpe:2.3:a:oracle:healthcare_master_person_index:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A699D02-296B-411E-9658-5893240605D6"
},
{
"criteria": "cpe:2.3:a:oracle:healthcare_master_person_index:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7036576C-2B1F-413D-B154-2DBF9BFDE7E3"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_calculation_engine:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E08D4207-DB46-42D6-A8C9-1BE857483B88",
"versionEndIncluding": "11.3.1",
"versionStartIncluding": "11.0.0"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_calculation_engine:10.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEE4B2F0-1AAB-4A1F-AE86-A568D43891B3"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_calculation_engine:10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "641D134E-6C51-4DB8-8554-F6B5222EF479"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_calculation_engine:10.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C79B50C2-27C2-4A9C-ACEE-B70015283F58"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_rules_palette:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB6321F8-7A0A-4DB8-9889-3527023C652A"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_rules_palette:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25F8E604-8180-4728-AD2D-7FF034E3E65A"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_rules_palette:10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02867DC7-E669-43C0-ACC4-E1CAA8B9994C"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_rules_palette:11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBAFA631-C92B-4FF7-8E65-07C67789EBCD"
},
{
"criteria": "cpe:2.3:a:oracle:insurance_rules_palette:11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9652104A-119D-4327-A937-8BED23C23861"
},
{
"criteria": "cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CBFA960-D242-43ED-8D4C-A60F01B70740"
},
{
"criteria": "cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0513B305-97EF-4609-A82E-D0CDFF9925BA"
},
{
"criteria": "cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61A7F6E0-A4A4-4FC3-90CB-156933CB3B9A"
},
{
"criteria": "cpe:2.3:a:oracle:rapid_planning:12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19A0F1AF-F2E6-44E7-8E2D-190E103B72D3"
},
{
"criteria": "cpe:2.3:a:oracle:rapid_planning:12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D53690D-3390-4A27-988A-709CD89DD05B"
},
{
"criteria": "cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31C7EEA3-AA72-48DA-A112-2923DBB37773"
},
{
"criteria": "cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0735989-13BD-40B3-B954-AC0529C5B53D"
},
{
"criteria": "cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83B5F416-56AE-4DC5-BCFF-49702463E716"
},
{
"criteria": "cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58405263-E84C-4071-BB23-165D49034A00"
},
{
"criteria": "cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD4AB77A-E829-4603-AF6A-97B9CD0D687F"
},
{
"criteria": "cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DE15D64-6F49-4F43-8079-0C7827384C86"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22847CAE-3C2C-4C2E-9D2E-47DB4091442E"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4D5A9AB-3DE0-4496-82E5-A2DB5CFDAA9F"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E484D25-1753-42A1-9658-8E9CCE8E3568"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FEAFF40-B0C7-4B05-A655-B3F93055FBCF"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBF4C859-616D-44F9-BE76-589A4E6E8BF5"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20357086-0C32-44B5-A1FA-79283E88FB47"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1AFAE16-B69F-410A-8CE3-1CDD998A8433"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:15.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8CE753D-A090-47DE-8EF0-8FDE07576E80"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:15.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BAFB538-A395-4C4D-83F7-CD453C0DFB4D"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:15.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C0CA26F-41D3-433F-9C17-1A4F5066F184"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:16.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F73E2EFA-0F43-4D92-8C7D-9E66811B76D6"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:16.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B27C4D75-3927-4D07-BE16-4204F641A453"
},
{
"criteria": "cpe:2.3:a:oracle:retail_integration_bus:16.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0A6CF77-09DF-43FD-833A-8DAAE016717A"
},
{
"criteria": "cpe:2.3:a:oracle:retail_open_commerce_platform:5.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07630491-0624-4C5C-A858-C5D3CDCD1B68"
},
{
"criteria": "cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC9CA11F-F718-43E5-ADB9-6C348C75E37A"
},
{
"criteria": "cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FBAAD32-1E9D-47F1-9F47-76FEA47EF54F"
},
{
"criteria": "cpe:2.3:a:oracle:retail_order_broker:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAA4DF85-9225-4422-BF10-D7DAE7DCE007"
},
{
"criteria": "cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77C2A2A4-285B-40A1-B9AD-42219D742DD4"
},
{
"criteria": "cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE8CF045-09BB-4069-BCEC-496D5AE3B780"
},
{
"criteria": "cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38E74E68-7F19-4EF3-AC00-3C249EAAA39E"
},
{
"criteria": "cpe:2.3:a:oracle:retail_point-of-sale:14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "632E9828-907F-4F2C-81D5-A74A6DDA2748"
},
{
"criteria": "cpe:2.3:a:oracle:retail_point-of-sale:14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "274999E6-18ED-46F0-8CF2-56374B3DF174"
},
{
"criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD3C8E59-B07D-4C5E-B467-2FA6C1DFDA5B"
},
{
"criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6DA82ED-20FF-4E6D-ACA0-C65F51F4F5C0"
},
{
"criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FFEA075-11EB-4E99-92A1-8B2883C64CC0"
},
{
"criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:16.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21973CDD-D16E-4321-9F8E-67F4264D7C21"
},
{
"criteria": "cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "959316A8-C3AF-4126-A242-3835ED0AD1E8"
},
{
"criteria": "cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDB925C6-2CBC-4D88-B9EA-F246F4F7A206"
},
{
"criteria": "cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"
},
{
"criteria": "cpe:2.3:a:oracle:service_architecture_leveraging_tuxedo:12.1.3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "909A7F73-0164-471B-8EBD-1F70072E9809"
},
{
"criteria": "cpe:2.3:a:oracle:service_architecture_leveraging_tuxedo:12.2.2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CE08DC9-5153-48D6-B23C-68A632FF8FF5"
},
{
"criteria": "cpe:2.3:a:oracle:tape_library_acsls:8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70D4467D-6968-4557-AF61-AFD42B2B48D3"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security_alert@emc.com"
}