oracle payment interface vulnerabilities

Latest oracle payment interface CVEs

Newest publication first

1. CVE-2021-45105 Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

   Published 2021-12-18

   Medium·CVSS 5.9 EPSS 100.0% PoC

   Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpr...

2. CVE-2021-42340 DoS via memory leak with WebSocket connections

   Published 2021-10-14

   High·CVSS 7.5 EPSS 11.8%

   The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the c...

3. CVE-2017-10069 Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 6.1.1. Difficult to exploit vulnerability all...

   Published 2017-08-08

   Medium·CVSS 5.3 EPSS 1.5%

   Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Pa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.