Known vulnerabilities in Oracle Retail Integration Bus

Vendor: Oracle

Software: Oracle Retail Integration Bus

Software CPE: cpe:2.3:a:oracle:oracle_retail_integration_bus:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 35

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (35)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU121709 - Improper input validation CVE-2025-26333	CWE-20	Medium	No	No	-	20.01.2026	SB20260120100 SB20260120113 SB20260120120 and 7 more
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 101 more
#VU115573 - Protection Mechanism Failure CVE-2025-41249	CWE-693	Medium	No	No	-	16.09.2025	SB20250916314 SB2025100741 SB20251008143 and 62 more
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 182 more
#VU111165 - Improper Access Control CVE-2025-48734	CWE-284	Medium	No	No	-	16.06.2025	SB2025061643 SB2025061644 SB2025061645 and 141 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819	CWE-22	Medium	Available	No	-	17.10.2024	SB2024101781 SB2024112849 SB2024120331 and 54 more
#VU98025 - Resource exhaustion CVE-2024-47554	CWE-400	Medium	No	No	-	03.10.2024	SB2024100352 SB2024100421 SB2024101007 and 133 more
#VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262	CWE-918	Medium	No	No	-	24.05.2024	SB2024052420 SB2024052423 SB2024052708 and 76 more
#VU88576 - Improper input validation CVE-2022-34381	CWE-20	High	No	No	-	16.04.2024	SB2024041703 SB2024041722 SB2024041723 and 7 more
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2022-46337	CWE-90	High	No	No	-	28.11.2023	SB2023112861 SB2024011806 SB2024020107 and 34 more
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	-	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more
#VU75409 - Improper input validation CVE-2023-20863	CWE-20	Medium	No	No	-	21.04.2023	SB2023042131 SB2023042132 SB2023050511 and 88 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	-	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU70441 - Insufficient Verification of Data Authenticity CVE-2021-37533	CWE-345	Low	No	No	-	20.12.2022	SB2022122007 SB2022123001 SB2023011876 and 82 more
#VU69809 - Out-of-bounds write CVE-2022-42920	CWE-787	High	No	No	-	01.12.2022	SB2022120151 SB2022120154 SB2022120628 and 56 more
#VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965	CWE-94	Critical	Available	Exploited	-	31.03.2022	SB2022033109 SB2022040109 SB2022040110 and 78 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	16.0.3.0	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU58198 - Exposure of sensitive information to an unauthorized actor CVE-2021-40690	CWE-200	Medium	No	No	-	16.11.2021	SB2021111622 SB2021111712 SB2022012032 and 37 more
#VU51511 - Improper Control of Generation of Code ('Code Injection') CVE-2020-13936	CWE-94	High	No	No	-	16.03.2021	SB2021031618 SB2021072614 SB2022011911 and 45 more

Showing elements 1 - 20 out of 35

Known vulnerabilities in Oracle Retail Integration Bus

Breakdown by Severity Chart

Vulnerabilities (35)

Please verify you're human