Oracle Corp. Oracle Retail Merchandising System

Name: Oracle Corp. Oracle Retail Merchandising System
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

10critical14high2medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	no fix	2020-03-02	4 versions
CVE-2020-9547US	critical9.8	18.4% (97th)	Exploit	no fix	2020-03-02	4 versions
CVE-2020-10673US	high8.8	8.03% (95th)	Exploit	no fix	2020-03-18	≤ 15.0
CVE-2020-11113US	high8.8	6.28% (94th)	Exploit	no fix	2020-03-31	≤ 15.0
CVE-2018-14718US	critical9.8	12.7% (96th)	—	no fix	2019-01-02	2 versions
CVE-2018-14721US	critical10.0	10.5% (96th)	—	no fix	2019-01-02	2 versions
CVE-2018-14719US	critical9.8	9.68% (95th)	—	no fix	2019-01-02	2 versions
CVE-2018-12023US	high7.5	8.87% (95th)	—	no fix	2019-03-21	≤ 15.0
CVE-2020-35491US	high8.1	7.75% (95th)	—	no fix	2020-12-17	≤ 15.0.3
CVE-2018-14720US	critical9.8	7.52% (94th)	—	no fix	2019-01-02	2 versions
CVE-2021-40690US	high7.5	7.44% (94th)	—	no fix	2021-09-19	2 versions
CVE-2018-12022US	high7.5	7.29% (94th)	—	no fix	2019-03-21	≤ 15.0
CVE-2020-11620US	high8.1	5.73% (93rd)	—	no fix	2020-04-07	≤ 15.0
CVE-2018-11307US	critical9.8	5.73% (93rd)	—	no fix	2019-07-09	≤ 15.0
CVE-2019-16942US	critical9.8	5.73% (93rd)	—	no fix	2019-10-01	3 versions
CVE-2019-16943US	critical9.8	4.74% (92nd)	—	no fix	2019-10-01	3 versions
CVE-2020-9546US	critical9.8	4.58% (92nd)	—	no fix	2020-03-02	4 versions
CVE-2020-11619US	high8.1	3.68% (90th)	—	no fix	2020-04-07	4 versions
CVE-2020-10968US	high8.8	3.66% (90th)	—	no fix	2020-03-26	≤ 15.0
CVE-2020-11112US	high8.8	3.64% (90th)	—	no fix	2020-03-31	≤ 15.0
CVE-2020-11111US	high8.8	3.61% (89th)	—	no fix	2020-03-31	≤ 15.0
CVE-2020-10650US	high8.1	3.60% (89th)	—	no fix	2022-12-26	≤ 15.0
CVE-2020-10969US	high8.8	3.56% (89th)	—	no fix	2020-03-26	≤ 15.0
CVE-2020-10672US	high8.8	3.06% (88th)	—	no fix	2020-03-18	≤ 15.0
CVE-2019-17091US	medium6.1	2.47% (84th)	—	no fix	2019-10-02	≤ 16.0
CVE-2018-3125US	medium6.5	1.17% (67th)	—	no fix	2019-01-16	≤ 14.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data22 CVEs
CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-17CWE-171 CVEs
CWE-284Improper Access Control1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan