Product by Oracle

    Retail Applications

    21 known vulnerabilities in Retail Applications (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Retail Applications (Oracle)
    HighCVE-2014-0050

    Apache Tomcat: Infinite Loop

    also in 3 other products

    		7.5
    MediumCVE-2025-48924

    Apache Commons Lang: Uncontrolled Recursion

    also in 27 other products

    		5.3
    HighCVE-2026-42587

    Netty: Allocation of Resources Without Limits or Throttling

    also in 8 other products

    		7.5
    CriticalCVE-2026-46983

    Oracle Retail Integration Bus: Improper Access Control

    also in 2 other products

    		9.8
    CriticalCVE-2026-46982

    Oracle Retail Integration Bus: Improper Access Control

    also in 2 other products

    		9.8
    HighCVE-2026-34481

    Apache Log4j JSON Template Layout: Improper Encoding or Escaping of Output

    also in 12 other products

    		7.5
    HighCVE-2026-59901

    Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

    also in 3 other products

    		7.5
    MediumCVE-2026-55956

    Apache Tomcat: Security constraints for default servlet ignored method

    also in 5 other products

    		6.5
    HighCVE-2026-34487

    Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

    also in 8 other products

    		7.5
    CriticalCVE-2026-41855

    Spring Framework Unsafe Deserialization via Jackson JMS Converters

    also in 7 other products

    		8.1
    HighCVE-2026-46943

    Oracle Retail EFTLink: Improper Access Control

    also in 2 other products

    		7.4
    Not ratedCVE-2015-0466

    Oracle Retail Applications: security vulnerability

    		—
    Not ratedCVE-2015-4827

    Oracle Retail Applications: security vulnerability

    		—
    MediumCVE-2026-21954

    Oracle Retail Xstore Point of Service: Improper Access Control

    also in 2 other products

    		4.3
    Not ratedCVE-2015-0494

    Oracle Retail Applications: security vulnerability

    		—
    LowCVE-2026-21953

    Oracle Retail Xstore Point of Service: Improper Access Control

    also in 2 other products

    		3.3
    Not ratedCVE-2016-0437

    Oracle Retail Applications: security vulnerability

    		—
    Not ratedCVE-2016-0434

    Oracle Retail Applications: security vulnerability

    		—
    Not ratedCVE-2016-0438

    Oracle Retail Applications: security vulnerability

    		—
    Not ratedCVE-2016-0436

    Oracle Retail Applications: security vulnerability

    		—
    Not ratedCVE-2016-0435

    Oracle Retail Applications: security vulnerability

    		—

    All products by Oracle