Known vulnerabilities in Oracle Retail Financial Integration

Known vulnerabilities in Oracle Retail Financial Integration

Vendor: Oracle

Software: Oracle Retail Financial Integration

Software CPE: cpe:2.3:a:oracle:oracle_retail_financial_integration:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 18

Public exploits: 3

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 101 more
#VU115573 - Protection Mechanism Failure CVE-2025-41249	CWE-693	Medium	No	No	-	16.09.2025	SB20250916314 SB2025100741 SB20251008143 and 62 more
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 180 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819	CWE-22	Medium	Available	No	-	17.10.2024	SB2024101781 SB2024112849 SB2024120331 and 54 more
#VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262	CWE-918	Medium	No	No	-	24.05.2024	SB2024052420 SB2024052423 SB2024052708 and 76 more
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	-	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more
#VU75409 - Improper input validation CVE-2023-20863	CWE-20	Medium	No	No	-	21.04.2023	SB2023042131 SB2023042132 SB2023050511 and 88 more
#VU69809 - Out-of-bounds write CVE-2022-42920	CWE-787	High	No	No	-	01.12.2022	SB2022120151 SB2022120154 SB2022120628 and 56 more
#VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965	CWE-94	Critical	Available	Exploited	-	31.03.2022	SB2022033109 SB2022040109 SB2022040110 and 78 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU58198 - Exposure of sensitive information to an unauthorized actor CVE-2021-40690	CWE-200	Medium	No	No	-	16.11.2021	SB2021111622 SB2021111712 SB2022012032 and 37 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU53672 - Permissions, Privileges, and Access Controls CVE-2021-22118	CWE-264	Low	No	No	-	31.05.2021	SB2021053107 SB2021072775 SB2021072776 and 21 more
#VU49739 - Improper input validation CVE-2020-5421	CWE-20	Medium	Available	No	-	20.01.2021	SB2021012002 SB2021012008 SB2021012015 and 39 more
#VU48792 - Incorrect Default Permissions CVE-2020-17521	CWE-276	Low	No	No	-	06.12.2020	SB2020120601 SB2021012082 SB2021012083 and 31 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU15467 - Improper input validation CVE-2018-15756	CWE-20	Low	No	No	-	22.10.2018	SB2018102305 SB2020012203 SB2020032701 and 28 more