Known vulnerabilities in Oracle Retail EFTLink

Known vulnerabilities in Oracle Retail EFTLink

Vendor: Oracle

Software: Oracle Retail EFTLink

Software CPE: cpe:2.3:a:oracle:oracle_retail_eftlink:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 15

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	-
#VU98516 - Server-Side Request Forgery (SSRF) CVE-2024-6763	CWE-918	Medium	No	No	-	14.10.2024	-
#VU86808 - Resource exhaustion CVE-2024-22201	CWE-400	Medium	No	No	-	26.02.2024	-
#VU85304 - Excessive Iteration CVE-2023-4043	CWE-834	Medium	No	No	-	11.01.2024	-
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	-	10.10.2023	-
#VU75217 - Improper input validation CVE-2023-26049	CWE-20	Low	No	No	-	18.04.2023	-
#VU65830 - Resource Management Errors CVE-2022-2048	CWE-399	Medium	No	No	-	27.07.2022	-
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	-
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	-
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	-
#VU56964 - Improper Access Control CVE-2021-34429	CWE-284	Medium	Available	No	-	30.09.2021	-
#VU54856 - Resource exhaustion CVE-2021-36374	CWE-400	Medium	No	No	-	14.07.2021	-
#VU52502 - Improper input validation CVE-2020-27218	CWE-20	Medium	No	No	-	23.04.2021	-
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	-
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	-	04.05.2020	-