Known vulnerabilities in Oracle Retail Point of Service

Known vulnerabilities in Oracle Retail Point of Service

Vendor: Oracle

Software: Oracle Retail Point of Service

Software CPE: cpe:2.3:a:oracle:oracle_retail_point-of-service:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 9

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU52501 - Server-Side Request Forgery (SSRF) CVE-2020-11987	CWE-918	Medium	No	No	-	23.04.2021	SB2021042315 SB2021042316 SB2021042514 and 32 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU27264 - Improper input validation CVE-2020-5398	CWE-20	Medium	Available	No	-	23.04.2020	SB2020042353 SB2020071609 SB2020071610 and 21 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-13990	CWE-611	Medium	No	No	-	01.08.2019	SB2019080104 SB2020042114 SB2020042350 and 26 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more