Known vulnerabilities in Oracle Retail Xstore Point of Service - page 3

Vendor: Oracle
Software: Oracle Retail Xstore Point of Service
Software CPE: cpe:2.3:a:oracle:oracle_retail_xstore_point_of_service:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 65
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Retail Xstore Point of Service Oracle Retail Xstore Point of Service is affected by 65 known vulnerabilities: 1 critical, 9 high, 40 medium, 15 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 - 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU48048 - Improper input validation
CVE-2019-3740		 CWE-20 Medium
No
No
 - 30.10.2020 SB2020103018
SB2020103032
SB2020103033
and 11 more
#VU28746 - Out-of-bounds read
CVE-2019-2872		 CWE-125 Low
No
No
 - 05.06.2020 SB2019101525
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU28194 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-0228		 CWE-611 Medium
No
No
 - 24.05.2020 SB2019041716
SB2021042320
SB2021042642
and 4 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 - 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU27265 - Improper input validation
CVE-2017-5533		 CWE-20 Medium
No
No
 - 23.04.2020 SB2020042359
#VU27266 - Improper input validation
CVE-2017-3160		 CWE-20 Low
No
No
 - 23.04.2020 SB2020042359
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU22875 - Deserialization of Untrusted Data
CVE-2019-10173		 CWE-502 High
No
No
 - 20.11.2019 SB2019072308
SB2019112016
SB2019121922
and 11 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 - 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more
#VU20992 - Resource Management Errors
CVE-2019-10072		 CWE-399 Medium
No
No
 - 10.09.2019 SB2019091025
SB2019112011
SB2019112012
and 14 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU20386 - Use After Free
CVE-2019-10082		 CWE-416 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086		 CWE-200 Medium
No
No
 - 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 30 more
#VU15176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-11797		 CWE-835 Low
No
No
 - 08.10.2018 SB2018100901
SB2018102421
SB2018111707
and 5 more
#VU13417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-12581		 CWE-79 Low
No
No
 - 21.06.2018 SB2018062201
SB2018062502
SB2020042359
and 5 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 - 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more
#VU12842 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-12626		 CWE-835 Low
No
No
 - 18.05.2018 SB2018050312
SB2020011463
SB2020011481
and 24 more


Showing elements 41 - 60 out of 65