Known vulnerabilities in Oracle Retail Service Backbone

Vendor: Oracle
Software: Oracle Retail Service Backbone
Software CPE: cpe:2.3:a:oracle:oracle_retail_service_backbone:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Retail Service Backbone Oracle Retail Service Backbone is affected by 28 known vulnerabilities: 6 high, 16 medium, 6 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121709 - Improper input validation
CVE-2025-26333		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120100
SB20260120113
SB20260120120
and 7 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 133 more
#VU88576 - Improper input validation
CVE-2022-34381		 CWE-20 High
No
No
 - 16.04.2024 SB2024041703
SB2024041722
SB2024041723
and 7 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU69809 - Out-of-bounds write
CVE-2022-42920		 CWE-787 High
No
No
 - 01.12.2022 SB2022120151
SB2022120154
SB2022120628
and 56 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 16.0.3.0 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 16.0.3.0 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 - 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more


Showing elements 1 - 20 out of 28