Known vulnerabilities in Oracle Retail Back Office

Known vulnerabilities in Oracle Retail Back Office

Vendor: Oracle

Software: Oracle Retail Back Office

Software CPE: cpe:2.3:a:oracle:oracle_retail_back_office:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU65469 - Improper input validation CVE-2022-29577	CWE-20	Medium	No	No	-	19.07.2022	SB2022071969 SB2022072038 SB20221018125 and 10 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41184	CWE-79	Medium	Available	No	-	20.11.2021	SB2021112002 SB2022030804 SB2022041935 and 74 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU52501 - Server-Side Request Forgery (SSRF) CVE-2020-11987	CWE-918	Medium	No	No	-	23.04.2021	SB2021042315 SB2021042316 SB2021042514 and 32 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU27264 - Improper input validation CVE-2020-5398	CWE-20	Medium	Available	No	-	23.04.2020	SB2020042353 SB2020071609 SB2020071610 and 21 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-13990	CWE-611	Medium	No	No	-	01.08.2019	SB2019080104 SB2020042114 SB2020042350 and 26 more
#VU17056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-14735	CWE-79	Low	No	No	-	17.01.2019	SB2019011705 SB2020011463 SB2020042337 and 11 more
#VU12312 - Deserialization of Untrusted Data CVE-2016-1000031	CWE-502	High	No	No	-	01.05.2018	SB2017111432 SB2018110601 SB2019051512 and 39 more