oracle retail customer insights

Name: oracle retail customer insights
Brand: oracle

productUS

cpe:2.3:a:oracle:retail_customer_insights:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical6high8medium0low

updated 2026-10-28

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	2 versions
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	2 versions
CVE-2018-1270US	critical9.8	77.5% (100th)	Exploit	no fix	2018-04-06	2 versions
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	no fix	2021-05-28	2 versions
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	2 versions
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	16.0.0 → 16.0.2
CVE-2018-1275US	critical9.8	57.4% (99th)	—	no fix	2018-04-11	2 versions
CVE-2018-1271US	medium5.9	34.4% (98th)	—	no fix	2018-04-06	2 versions
CVE-2021-42340US	high7.5	11.8% (96th)	—	no fix	2021-10-14	2 versions
CVE-2018-11040US	high7.5	3.23% (88th)	—	no fix	2018-06-25	2 versions
CVE-2018-1272US	high7.5	3.06% (88th)	—	no fix	2018-04-06	2 versions
CVE-2018-1257US	medium6.5	3.02% (87th)	—	no fix	2018-05-11	2 versions
CVE-2018-11039US	medium5.9	2.77% (86th)	—	no fix	2018-06-25	2 versions
CVE-2018-1258US	high8.8OT elevated	2.46% (84th)	—	no fix	2018-05-11	2 versions
CVE-2021-2351US	medium5.1OT elevated	2.43% (84th)	—	no fix	2021-07-21	16.0 → 16.0.2
CVE-2020-29505US	high7.5	0.76% (55th)	—	no fix	2022-07-11	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-358Improperly Implemented Security Check for Standard2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-254CWE-2541 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.