Known vulnerabilities in Oracle Retail Assortment Planning

Known vulnerabilities in Oracle Retail Assortment Planning

Vendor: Oracle

Software: Oracle Retail Assortment Planning

Software CPE: cpe:2.3:a:oracle:oracle_retail_assortment_planning:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 14

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 98 more
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 177 more
#VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262	CWE-918	Medium	No	No	-	24.05.2024	SB2024052420 SB2024052423 SB2024052708 and 76 more
#VU69809 - Out-of-bounds write CVE-2022-42920	CWE-787	High	No	No	-	01.12.2022	SB2022120151 SB2022120154 SB2022120628 and 56 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Available	No	-	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU49739 - Improper input validation CVE-2020-5421	CWE-20	Medium	Available	No	-	20.01.2021	SB2021012002 SB2021012008 SB2021012015 and 39 more
#VU48048 - Improper input validation CVE-2019-3740	CWE-20	Medium	No	No	-	30.10.2020	SB2020103018 SB2020103032 SB2020103033 and 11 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	-	04.05.2020	SB2020050406 SB2020071606 SB2020071620 and 67 more
#VU24597 - Improper input validation CVE-2019-2904	CWE-20	High	No	No	-	25.01.2020	SB2020011463 SB2020042108 SB2020042109 and 20 more
#VU24469 - Improper input validation CVE-2019-17091	CWE-20	Medium	No	No	-	21.01.2020	SB2020012203 SB2020012405 SB2020042311 and 13 more