Product by Oracle

Oracle Retail Invoice Matching

12 known vulnerabilities in Oracle Retail Invoice Matching (Oracle), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Retail Invoice Matching (Oracle)

Critical	CVE-2017-12617	Apache Tomcat Remote Code Execution Vulnerability In CISA KEValso in 54 other products	8.1	03.10.2017
High	CVE-2020-5421	RFD Protection Bypass via jsessionid also in 36 other products	8.7	19.09.2020
High	CVE-2019-10086	Apache Commons Beanutils: security vulnerability also in 58 other products	7.3	20.08.2019
High	CVE-2018-15756	DoS Attack via Range Requests also in 39 other products	7.5	18.10.2018
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
Medium	CVE-2015-9251	jQuery: Cross-Site Scripting (XSS) also in 45 other products	6.1	18.01.2018
Medium	CVE-2019-17091	Eclipse Mojarra: Cross-Site Scripting (XSS) also in 21 other products	6.1	02.10.2019
Medium	CVE-2019-10219	Hibernate Hibernate-validator: Cross-site Scripting also in 166 other products	6.5	08.11.2019
Medium	CVE-2021-36374	Apache Ant ZIP, and ZIP based, archive denial of service vulerability also in 37 other products	5.5	14.07.2021
Medium	CVE-2021-36373	Apache Ant TAR archive denial of service vulnerability also in 33 other products	5.5	14.07.2021
High	CVE-2017-3254	Oracle Retail Invoice Matching: Denial of Service also in 1 other product	7.6	24.04.2017
Medium	CVE-2021-2017	Oracle User Management: security vulnerability also in 3 other products	4.3	20.01.2021