Known vulnerabilities in Oracle Retail Sales Audit

Known vulnerabilities in Oracle Retail Sales Audit

Vendor: Oracle

Software: Oracle Retail Sales Audit

Software CPE: cpe:2.3:a:oracle:oracle_retail_sales_audit:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 182 more
#VU75431 - Uncontrolled Recursion CVE-2023-1436	CWE-674	Medium	No	No	-	24.04.2023	SB2023042409 SB2023042411 SB2023050111 and 86 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	-	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU54856 - Resource exhaustion CVE-2021-36374	CWE-400	Medium	No	No	-	14.07.2021	SB2021071409 SB2021072011 SB2021101927 and 43 more
#VU25830 - Deserialization of Untrusted Data CVE-2020-9546	CWE-502	High	No	No	-	09.03.2020	SB2020030909 SB2020071523 SB2020071620 and 31 more
#VU24597 - Improper input validation CVE-2019-2904	CWE-20	High	No	No	-	25.01.2020	SB2020011463 SB2020042108 SB2020042109 and 20 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251	CWE-79	Low	No	No	-	31.07.2018	SB2018080106 SB2019011705 SB2019100301 and 63 more
#VU12842 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2017-12626	CWE-835	Low	No	No	-	18.05.2018	SB2018050312 SB2020011463 SB2020011481 and 24 more