Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Retail Insights Cloud Service Suite
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-9488 4 Apache, Debian, Oracle and 1 more 46 Log4j, Debian Linux, Communications Application Session Controller and 43 more 2024-11-21 4.3 MEDIUM 3.7 LOW
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1