Oracle Corp. Oracle Retail Order Broker

Name: Oracle Corp. Oracle Retail Order Broker
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical17high6medium1low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-12617US	high8.1OT critical	100.0% (100th)	KEV	no fix	2017-10-04	2 versions
CVE-2019-0232US	high8.1	99.9% (100th)	Exploit	no fix	2019-04-15	2 versions
CVE-2018-11784US	medium4.3	97.7% (100th)	Exploit	no fix	2018-10-04	3 versions
CVE-2019-0227US	high7.5	91.9% (100th)	Exploit	no fix	2019-05-01	3 versions
CVE-2017-5645US	critical9.8	89.4% (100th)	Exploit	no fix	2017-04-17	5 versions
CVE-2020-5398US	high7.5OT high	88.3% (100th)	Exploit	no fix	2020-01-17	2 versions
CVE-2020-13935US	high7.5	86.6% (100th)	Exploit	no fix	2020-07-14	≤ 15.0
CVE-2020-9484US	high7.0	55.5% (99th)	Exploit	no fix	2020-05-20	≤ 15.0
CVE-2019-13990US	critical9.8	16.6% (97th)	Exploit	no fix	2019-07-26	4 versions
CVE-2018-8032US	medium6.1	10.6% (96th)	Exploit	no fix	2018-08-02	3 versions
CVE-2018-8039US	high8.1	8.51% (95th)	Exploit	no fix	2018-07-02	2 versions
CVE-2020-9488US	low3.7	8.22% (95th)	Exploit	no fix	2020-04-27	4 versions
CVE-2019-17573US	medium6.1	7.05% (94th)	Exploit	no fix	2020-01-16	≤ 15.0
CVE-2019-5427US	high7.5	4.88% (92nd)	Exploit	no fix	2019-04-22	4 versions
CVE-2019-10173US	critical9.8	95.0% (100th)	—	no fix	2019-07-23	≤ 15.0
CVE-2020-13934US	high7.5	64.1% (99th)	—	no fix	2020-07-14	≤ 15.0
CVE-2018-8034US	high7.5	21.0% (98th)	—	no fix	2018-08-01	3 versions
CVE-2019-12419US	critical9.8OT elevated	13.8% (97th)	—	no fix	2019-11-06	≤ 15.0
CVE-2022-25647US	high7.5	12.2% (96th)	—	no fix	2022-05-01	2 versions
CVE-2019-17566US	high7.5	10.9% (96th)	—	no fix	2020-11-12	2 versions
CVE-2019-17563US	high7.5	10.7% (96th)	—	no fix	2019-12-23	≤ 15.0
CVE-2018-15756US	high7.5	9.21% (95th)	—	no fix	2018-10-18	4 versions
CVE-2020-10683US	critical9.8	7.27% (94th)	—	no fix	2020-05-01	5 versions
CVE-2019-12406US	medium6.5	6.26% (94th)	—	no fix	2019-11-06	≤ 15.0
CVE-2019-12423US	high7.5	6.06% (93rd)	—	no fix	2020-01-16	≤ 15.0
CVE-2020-9410US	high8.8	5.37% (93rd)	—	no fix	2020-05-20	2 versions
CVE-2020-5397US	medium5.3	2.55% (85th)	—	no fix	2020-01-17	2 versions
CVE-2018-1258US	high8.8OT elevated	2.46% (84th)	—	no fix	2018-05-11	4 versions
CVE-2019-12415US	medium5.5	1.00% (63rd)	—	no fix	2019-10-23	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-399CWE-3992 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan