Known vulnerabilities in Oracle Retail Integration Bus - page 2

Known vulnerabilities in Oracle Retail Integration Bus - page 2

Vendor: Oracle

Software: Oracle Retail Integration Bus

Software CPE: cpe:2.3:a:oracle:oracle_retail_integration_bus:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 35

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (35)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	16.0.3.0	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU53672 - Permissions, Privileges, and Access Controls CVE-2021-22118	CWE-264	Low	No	No	-	31.05.2021	SB2021053107 SB2021072775 SB2021072776 and 21 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU49739 - Improper input validation CVE-2020-5421	CWE-20	Medium	Available	No	-	20.01.2021	SB2021012002 SB2021012008 SB2021012015 and 39 more
#VU48792 - Incorrect Default Permissions CVE-2020-17521	CWE-276	Low	No	No	-	06.12.2020	SB2020120601 SB2021012082 SB2021012083 and 31 more
#VU48048 - Improper input validation CVE-2019-3740	CWE-20	Medium	No	No	-	30.10.2020	SB2020103018 SB2020103032 SB2020103033 and 11 more
#VU29068 - Server-Side Request Forgery (SSRF) CVE-2019-17566	CWE-918	Medium	No	No	-	16.06.2020	SB2020061613 SB2020062304 SB2020072310 and 23 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	-	04.05.2020	SB2020050406 SB2020071606 SB2020071620 and 67 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU15467 - Improper input validation CVE-2018-15756	CWE-20	Low	No	No	-	22.10.2018	SB2018102305 SB2020012203 SB2020032701 and 28 more
#VU13059 - Deserialization of Untrusted Data CVE-2018-8013	CWE-502	Low	No	No	-	30.05.2018	SB2018053011 SB2018060503 SB2019011705 and 16 more
#VU12312 - Deserialization of Untrusted Data CVE-2016-1000031	CWE-502	High	No	No	-	01.05.2018	SB2017111432 SB2018110601 SB2019051512 and 39 more

Showing elements 21 - 40 out of 35