CVE-2023-20863 in Retail Xstore Point of Serviceinfo

Summary

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

11/01/2022

Disclosure

04/13/2023

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
242812Oracle Retail Xstore Point of Service Xenvironment denial of service404Not definedOfficial fixCVE-2023-20863
242811Oracle Retail Fiscal Management RTIL denial of service404Not definedOfficial fixCVE-2023-20863
242810Oracle Retail Customer Management and Segmentation Foundation Security denial of service404Not definedOfficial fixCVE-2023-20863
242764Oracle MySQL Enterprise Monitor Monitoring denial of service404Not definedOfficial fixCVE-2023-20863
242745Oracle Healthcare Master Person Index Internal Operations denial of service404Not definedOfficial fixCVE-2023-20863
242715Oracle Enterprise Data Quality General denial of service404Not definedOfficial fixCVE-2023-20863
242649Oracle FLEXCUBE Universal Banking Infrastructure denial of service404Not definedOfficial fixCVE-2023-20863
242645Oracle Financial Services Model Management and Governance Installer denial of service404Not definedOfficial fixCVE-2023-20863
242643Oracle Banking Virtual Account Management Common Core denial of service404Not definedOfficial fixCVE-2023-20863
242641Oracle Banking Trade Finance Process Management Dashboard denial of service404Not definedOfficial fixCVE-2023-20863
242639Oracle Banking Supply Chain Finance Security denial of service404Not definedOfficial fixCVE-2023-20863
242636Oracle Banking Origination Onboarding Batch Processes denial of service404Not definedOfficial fixCVE-2023-20863
242634Oracle Banking Liquidity Management Common denial of service404Not definedOfficial fixCVE-2023-20863
242632Oracle Banking Electronic Data Exchange for Corporates Reports denial of service404Not definedOfficial fixCVE-2023-20863
242630Oracle Banking Digital Experience UI denial of service404Not definedOfficial fixCVE-2023-20863
242627Oracle Banking Credit Facilities Process Management Common denial of service404Not definedOfficial fixCVE-2023-20863
242625Oracle Banking Corporate Lending Core denial of service404Not definedOfficial fixCVE-2023-20863
242624Oracle Banking Cash Management Accessibility denial of service404Not definedOfficial fixCVE-2023-20863
242622Oracle Banking Branch Reports denial of service404Not definedOfficial fixCVE-2023-20863
242621Oracle Banking APIs IDM Authentication denial of service404Not definedOfficial fixCVE-2023-20863
242550Oracle SD-WAN Edge Management denial of service404Not definedOfficial fixCVE-2023-20863
242549Oracle Communications Session Report Manager Security denial of service404Not definedOfficial fixCVE-2023-20863
242544Oracle Communications Element Manager Security denial of service404Not definedOfficial fixCVE-2023-20863
242541Oracle Communications Cloud Native Core Security Edge Protection Proxy Configuration denial of service404Not definedOfficial fixCVE-2023-20863
242538Oracle Communications Cloud Native Core Policy Install/Upgrade denial of service404Not definedOfficial fixCVE-2023-20863
242530Oracle Communications Cloud Native Core Binding Support Function Install/Upgrade denial of service404Not definedOfficial fixCVE-2023-20863
242462Oracle Commerce Guided Search Workbench denial of service404Not definedOfficial fixCVE-2023-20863
234978Oracle Utilities Testing Accelerator Tools denial of service404Not definedOfficial fixCVE-2023-20863
234942Oracle Retail Predictive Application Server RPAS Server denial of service404Not definedOfficial fixCVE-2023-20863
234941Oracle Retail Integration Bus RIB Kernal denial of service404Not definedOfficial fixCVE-2023-20863
234939Oracle Retail Financial Integration PeopleSoft Integration Bugs denial of service404Not definedOfficial fixCVE-2023-20863
234884Oracle Documaker Interactive Docupresentment Server denial of service404Not definedOfficial fixCVE-2023-20863
234826Oracle WebLogic Server Core denial of service404Not definedOfficial fixCVE-2023-20863
234823Oracle Identity Manager Connector Mainframe Connectors denial of service404Not definedOfficial fixCVE-2023-20863
234762Oracle FLEXCUBE Investor Servicing Infrastructure Code denial of service404Not definedOfficial fixCVE-2023-20863
234760Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Platform denial of service404Not definedOfficial fixCVE-2023-20863
234759Oracle Financial Services Enterprise Case Management ECM denial of service404Not definedOfficial fixCVE-2023-20863
234758Oracle Financial Services Behavior Detection Platform denial of service404Not definedOfficial fixCVE-2023-20863
234757Oracle Financial Services Analytical Applications Infrastructure Centralized Thirdparty Jars denial of service404Not definedOfficial fixCVE-2023-20863
234622Oracle Primavera Gateway Admin denial of service404Not definedOfficial fixCVE-2023-20863
234597Oracle Communications Cloud Native Core Network Repository Function Install/Upgrade denial of service404Not definedOfficial fixCVE-2023-20863
234535Oracle Communications Unified Inventory Management Security denial of service404Not definedOfficial fixCVE-2023-20863
234531Oracle Communications Network Integrity Other denial of service404Not definedOfficial fixCVE-2023-20863
234528Oracle Communications BRM - Elastic Charging Engine Charging Server denial of service404Not definedOfficial fixCVE-2023-20863
225880VMware Spring Framework SpEL Expression resource consumption400Not definedOfficial fixCVE-2023-20863

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!