Known vulnerabilities in Oracle Retail EFTLink

Known vulnerabilities in Oracle Retail EFTLink

Vendor: Oracle

Software: Oracle Retail EFTLink

Software CPE: cpe:2.3:a:oracle:oracle_retail_eftlink:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 15

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 101 more
#VU98516 - Server-Side Request Forgery (SSRF) CVE-2024-6763	CWE-918	Medium	No	No	-	14.10.2024	SB20241014107 SB2024112849 SB2024120517 and 49 more
#VU86808 - Resource exhaustion CVE-2024-22201	CWE-400	Medium	No	No	-	26.02.2024	SB2024022652 SB2024030711 SB2024030845 and 43 more
#VU85304 - Excessive Iteration CVE-2023-4043	CWE-834	Medium	No	No	-	11.01.2024	SB2024011123 SB2024012646 SB2024020506 and 15 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	-	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 652 more
#VU75217 - Improper input validation CVE-2023-26049	CWE-20	Low	No	No	-	18.04.2023	SB2023041842 SB2023051821 SB2023060836 and 78 more
#VU65830 - Resource Management Errors CVE-2022-2048	CWE-399	Medium	No	No	-	27.07.2022	SB2022072723 SB2022080103 SB2022080260 and 44 more
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	SB2021120221 SB2022061003 SB2022061421 and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU56964 - Improper Access Control CVE-2021-34429	CWE-284	Medium	Available	No	-	30.09.2021	SB2021093014 SB2021093016 SB2022012745 and 25 more
#VU54856 - Resource exhaustion CVE-2021-36374	CWE-400	Medium	No	No	-	14.07.2021	SB2021071409 SB2021072011 SB2021101927 and 43 more
#VU52502 - Improper input validation CVE-2020-27218	CWE-20	Medium	No	No	-	23.04.2021	SB2021042305 SB2021042635 SB2021063002 and 15 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	-	04.05.2020	SB2020050406 SB2020071606 SB2020071620 and 67 more