Product by Oracle

Oracle Retail EFTLink

11 known vulnerabilities in Oracle Retail EFTLink (Oracle), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Retail EFTLink (Oracle)

Critical	CVE-2017-12617	Apache Tomcat Remote Code Execution Vulnerability In CISA KEValso in 54 other products	8.1	03.10.2017
High	CVE-2021-42340	DoS via memory leak with WebSocket connections also in 18 other products	7.5	14.10.2021
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
High	CVE-2020-11979	Apache Ant: Creation of Temporary File in Directory with Insecure Permissions also in 30 other products	7.5	01.10.2020
Medium	CVE-2021-34429	The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization also in 18 other products	5.3	15.07.2021
Medium	CVE-2020-27218	The Eclipse Foundation Eclipse Jetty: Sensitive Information in Resource Not Removed Before Reuse also in 18 other products	4.8	28.11.2020
Low	CVE-2020-9488	Apache Log4j: security vulnerability also in 44 other products	3.7	27.04.2020
Medium	CVE-2019-10219	Hibernate Hibernate-validator: Cross-site Scripting also in 166 other products	6.5	08.11.2019
Medium	CVE-2021-36374	Apache Ant ZIP, and ZIP based, archive denial of service vulerability also in 37 other products	5.5	14.07.2021
Medium	CVE-2021-36373	Apache Ant TAR archive denial of service vulnerability also in 33 other products	5.5	14.07.2021
High	CVE-2026-46943	Oracle Retail EFTLink: Improper Access Control also in 2 other products	7.4	21.07.2026