Product by Oracle

Oracle Retail Merchandising System

56 known vulnerabilities in Oracle Retail Merchandising System (Oracle), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Retail Merchandising System (Oracle)

Critical	CVE-2022-22965	Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEValso in 35 other products	9.8	01.04.2022
Critical	CVE-2020-9548	FasterXML Jackson-databind: security vulnerability also in 25 other products	9.8	02.03.2020
Critical	CVE-2018-14721	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 11 other products	10.0	02.01.2019
Critical	CVE-2018-14718	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 24 other products	9.8	02.01.2019
Critical	CVE-2018-14719	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 19 other products	9.8	02.01.2019
Critical	CVE-2019-20330	FasterXML Jackson-databind: security vulnerability also in 29 other products	9.8	03.01.2020
Critical	CVE-2018-14720	FasterXML Jackson-databind: XML External Entity (XXE) also in 11 other products	9.8	02.01.2019
Critical	CVE-2019-16942	FasterXML Jackson-databind: security vulnerability also in 27 other products	9.8	01.10.2019
Critical	CVE-2019-17531	FasterXML Jackson-databind: security vulnerability also in 21 other products	9.8	12.10.2019
High	CVE-2020-5421	RFD Protection Bypass via jsessionid also in 36 other products	8.7	19.09.2020
Critical	CVE-2019-16943	FasterXML Jackson-databind: security vulnerability also in 25 other products	9.8	01.10.2019
Critical	CVE-2020-9546	FasterXML Jackson-databind: security vulnerability also in 31 other products	9.8	02.03.2020
High	CVE-2020-36179	FasterXML Jackson-databind: security vulnerability also in 43 other products	8.1	06.01.2021
High	CVE-2020-10673	FasterXML Jackson-databind: security vulnerability also in 31 other products	8.8	18.03.2020
Critical	CVE-2020-5413	Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets" also in 8 other products	9.8	31.07.2020
High	CVE-2020-35728	FasterXML Jackson-databind: security vulnerability also in 40 other products	8.1	27.12.2020
High	CVE-2020-11113	FasterXML Jackson-databind: security vulnerability also in 32 other products	8.8	31.03.2020
High	CVE-2019-10086	Apache Commons Beanutils: security vulnerability also in 58 other products	7.3	20.08.2019
High	CVE-2020-36188	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2020-36184	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2020-35491	FasterXML Jackson-databind: security vulnerability also in 26 other products	8.1	17.12.2020
High	CVE-2020-35490	FasterXML Jackson-databind: security vulnerability also in 25 other products	8.1	17.12.2020
High	CVE-2018-12023	FasterXML Jackson-databind: security vulnerability also in 10 other products	7.5	17.03.2019
High	CVE-2020-11620	FasterXML Jackson-databind: security vulnerability also in 18 other products	8.1	07.04.2020
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021

All vulnerabilities in search

News

SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-254054 V1.0: Spring Framework Vulnerability (Spring4Shell or SpringShell, CVE-2022-22965) - Impact to Siemens Productssiemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News