Known vulnerabilities in Oracle Retail Merchandising System
Vendor:
Oracle
Software:
Oracle Retail Merchandising System
Software CPE:
cpe:2.3:a:oracle:oracle_retail_merchandising_system:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
25
Public exploits:
5
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (25)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | - | 22.12.2025 | - | ||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | - | 04.08.2025 | - | ||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | - | 16.06.2025 | - | ||
| #VU98025 - Resource exhaustion CVE-2024-47554 |
CWE-400 | Medium | - | 03.10.2024 | - | ||
| #VU83582 - Improper input validation CVE-2023-34053 |
CWE-20 | Medium | - | 29.11.2023 | - | ||
| #VU75431 - Uncontrolled Recursion CVE-2023-1436 |
CWE-674 | Medium | - | 24.04.2023 | - | ||
| #VU69809 - Out-of-bounds write CVE-2022-42920 |
CWE-787 | High | - | 01.12.2022 | - | ||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | - | 25.10.2022 | - | ||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | - | 14.10.2022 | - | ||
| #VU63085 - Improper input validation CVE-2022-22971 |
CWE-20 | Medium | - | 12.05.2022 | - | ||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | - | 01.04.2022 | - | ||
| #VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965 |
CWE-94 | Critical | - | 31.03.2022 | - | ||
| #VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437 |
CWE-835 | Medium | - | 25.01.2022 | - | ||
| #VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832 |
CWE-94 | Medium | - | 28.12.2021 | - | ||
| #VU58198 - Exposure of sensitive information to an unauthorized actor CVE-2021-40690 |
CWE-200 | Medium | - | 16.11.2021 | - | ||
| #VU55044 - Improper input validation CVE-2021-2351 |
CWE-20 | High | - | 20.07.2021 | - | ||
| #VU54856 - Resource exhaustion CVE-2021-36374 |
CWE-400 | Medium | - | 14.07.2021 | - | ||
| #VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425 |
CWE-22 | Low | - | 15.04.2021 | - | ||
| #VU49739 - Improper input validation CVE-2020-5421 |
CWE-20 | Medium | - | 20.01.2021 | - | ||
| #VU20844 - Protection Mechanism Failure CVE-2019-10086 |
CWE-693 | Low | - | 04.09.2019 | - |
Showing elements 1 - 20 out of 25