Retail Extract Transform And Load vulnerabilities

2 known vulnerabilities in Retail Extract Transform And Load from Oracle. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apache Log4j 1.x: Deserialization of Untrusted Data

  CVE-2022-23307Jan 18, 2022ApacheEPSS 54.4%

  CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

• 9.8 Critical severity

  Apache Log4j 1.x: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-23305Jan 18, 2022ApacheEPSS 66.5%

  By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate