Product by Oracle
Oracle Retail Customer Management and Segmentation Foundation
57 known vulnerabilities in Oracle Retail Customer Management and Segmentation Foundation (Oracle), 1 of them actively exploited (CISA KEV).
Key figures
57
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEValso in 35 other products | 9.8 | |
| Critical | CVE-2018-14718 | FasterXML Jackson-databind: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2019-14540 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2019-14379 | FasterXML Jackson-databind: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-10683 | Dom4j Project Dom4j: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2018-11307 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| High | CVE-2020-5421 | RFD Protection Bypass via jsessionid | 8.7 | |
| Critical | CVE-2019-16335 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| Critical | CVE-2019-17267 | FasterXML Jackson-databind: security vulnerability | 9.8 | |
| High | CVE-2020-36179 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| Critical | CVE-2020-5413 | Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets" | 9.8 | |
| High | CVE-2020-35728 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| Medium | CVE-2020-11022 | jQuery has a potential XSS vulnerability | 6.9 | |
| High | CVE-2020-36188 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36184 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2021-23337 | Command Injection | 7.2 | |
| High | CVE-2020-35491 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2019-14439 | FasterXML Jackson-databind: security vulnerability | 7.5 | |
| Medium | CVE-2019-11358 | Drupal core: security vulnerability | 6.1 | |
| Critical | CVE-2019-3772 | Spring Integration XML External Entity Injection (XXE) | 9.8 | |
| High | CVE-2020-36183 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2021-37714 | Jhy Jsoup: Infinite Loop | 7.5 | |
| High | CVE-2020-36185 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36186 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36187 | FasterXML Jackson-databind: security vulnerability | 8.1 |