Known vulnerabilities in Oracle Retail Invoice Matching

Vendor: Oracle
Software: Oracle Retail Invoice Matching
Software CPE: cpe:2.3:a:oracle:oracle_retail_invoice_matching:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Retail Invoice Matching Oracle Retail Invoice Matching is affected by 7 known vulnerabilities: 5 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 - 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU9424 - Authentication Bypass Issues
CVE-2017-8028		 CWE-592 Low
No
No
 - 27.11.2017 SB2017101610
SB2017112207
SB2018052906
and 1 more