What’s Vulnerable › Products

Oracle Corporation Retail Customer Management and Segmentation Foundation vulnerabilities

57 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Corporation Retail Customer Management and Segmentation Foundation version is affected

Exploited Oracle Corporation Retail Customer Management and Segmentation Foundation vulnerabilities

• CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability

Latest Oracle Corporation Retail Customer Management and Segmentation Foundation vulnerabilities

• CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2021-37714 — Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions (CVSS 7.5)
• CVE-2021-30129 — DoS/OOM leak vulnerability in Apache Mina SSHD Server (CVSS 6.5)
• CVE-2021-31812 — A carefully crafted PDF file can trigger an infinite loop while loading the file (CVSS 5.5)
• CVE-2021-31811 — A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file (CVSS 5.5)
• CVE-2021-22118 — (CVSS 7.8)
• CVE-2021-27906 — A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file (CVSS 5.5)
• CVE-2021-27807 — A carefully crafted PDF file can trigger an infinite loop while loading the file (CVSS 5.5)
• CVE-2021-23337 — Command Injection (CVSS 7.2)
• CVE-2020-28500 — Regular Expression Denial of Service (ReDoS) (CVSS 5.3)
• CVE-2021-2057 — (CVSS 6.5)
• CVE-2020-36183 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36182 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36180 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36179 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36189 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36188 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36187 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36186 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36185 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36184 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36181 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-35728 — Serialization gadget exploit in jackson-databind (CVSS 8.1)
• CVE-2020-35491 — Serialization gadgets exploit in jackson-databind (CVSS 8.1)
• CVE-2020-8908 — Temp directory permission issue in Guava (CVSS 3.3)