Oracle Retail Merchandising System vulnerabilities
56 published vulnerabilities in Oracle Retail Merchandising System, 1 of them exploited in the wild. The most were published in 2020 (32), and 2 so far in 2022.
Oracle Retail Merchandising System vulnerabilities by year
2018
2019
2020
2021
2022
Most exploited Oracle Retail Merchandising System vulnerabilities
- CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution
- CVE-2018-14721 Server-Side Request Forgery (SSRF) in jackson-databind
- CVE-2020-5413 Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"
- CVE-2020-9546 jackson-databind mishandles the interaction between serialization gadgets and typing
- CVE-2020-9548 jackson-databind mishandles the interaction between serialization gadgets and typing
- CVE-2019-20330 Deserialization of Untrusted Data in jackson-databind
- CVE-2019-17531 jackson-databind polymorphic typing issue
- CVE-2019-16942 Polymorphic Typing in FasterXML jackson-databind
- CVE-2019-16943 jackson-databind polymorphic typing issue
- CVE-2018-14718 Arbitrary Code Execution in jackson-databind
- CVE-2018-14719 Arbitrary Code Execution in jackson-databind
- CVE-2018-14720 XML External Entity Reference (XXE) in jackson-databind
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.