Product by Oracle

    Oracle Retail Integration Bus

    41 known vulnerabilities in Oracle Retail Integration Bus (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    41

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Retail Integration Bus (Oracle)
    CriticalCVE-2022-22965

    Spring Framework JDK 9+ Remote Code Execution Vulnerability

    In CISA KEValso in 35 other products

    		9.8
    CriticalCVE-2017-5645

    Apache Log4j: Deserialization of Untrusted Data

    also in 74 other products

    		9.8
    CriticalCVE-2018-1270

    Spring Framework: Code Injection

    also in 28 other products

    		9.8
    CriticalCVE-2018-8013

    Apache Batik: Deserialization of Untrusted Data

    also in 21 other products

    		9.8
    CriticalCVE-2019-13990

    Software Quartz: XML External Entity (XXE)

    also in 27 other products

    		9.8
    HighCVE-2020-13936

    Velocity Sandbox Bypass

    also in 14 other products

    		8.8
    CriticalCVE-2020-10683

    Dom4j Project Dom4j: XML External Entity (XXE)

    also in 36 other products

    		9.8
    HighCVE-2020-5398

    Spring Framework: Cross-site Scripting

    also in 33 other products

    		8.0
    CriticalCVE-2016-3444

    Oracle Retail Integration Bus: security vulnerability

    		9.8
    HighCVE-2020-5421

    RFD Protection Bypass via jsessionid

    also in 36 other products

    		8.7
    HighCVE-2019-12402

    Apache Commons Compress: Infinite Loop

    also in 19 other products

    		7.5
    HighCVE-2016-0635

    Oracle Insurance Policy Administration J2EE: security vulnerability

    also in 9 other products

    		8.8
    HighCVE-2019-17566

    Apache Batik: Server-Side Request Forgery (SSRF)

    also in 17 other products

    		7.5
    HighCVE-2018-15756

    DoS Attack via Range Requests

    also in 39 other products

    		7.5
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2020-11979

    Apache Ant: Creation of Temporary File in Directory with Insecure Permissions

    also in 30 other products

    		7.5
    HighCVE-2021-40690

    Bypass of the secureValidation property

    also in 18 other products

    		7.5
    HighCVE-2018-1000632

    Dom4j Project Dom4j: security vulnerability

    also in 12 other products

    		7.5
    MediumCVE-2018-1271

    Spring Framework: Path Traversal

    also in 28 other products

    		5.9
    MediumCVE-2022-23437

    Infinite loop within Apache XercesJ xml parser

    also in 31 other products

    		6.5
    HighCVE-2018-1258

    Pivotal Spring Framework: security vulnerability

    also in 41 other products

    		8.8
    HighCVE-2018-1272

    Spring Framework: Privilege Escalation

    also in 25 other products

    		7.5
    HighCVE-2021-2351

    Oracle WebLogic Server: security vulnerability

    also in 97 other products

    		8.3
    MediumCVE-2018-10237

    Google Guava: Deserialization of Untrusted Data

    also in 16 other products

    		5.9
    MediumCVE-2019-3740

    Dell RSA BSAFE Crypto-J: Cryptographic Issues

    also in 18 other products

    		6.5

    All vulnerabilities in search

    News

    All products by Oracle