Xstore Security patches 23.0.2

Hi,

On Critical Patch Updates, Security Alerts and Bulletins is shown the security updates for the different months.

I can see there are differences within the reports.

e.g: Critical Patch Update - April 2025 indicate (which affects 23.0.2):

CVE-2023-40167	Oracle Retail Xstore Point of Service	Point of Sale (Eclipse Jetty)

But that is not present on Critical Patch Update - July 2025 nor Critical Patch Update - October 2025.

So I have these questions:

1)Isn't those reports suppose to be cumulative?

2)If they are not cumulative, is there any place where I can see all the patches that affect Xstore v23.0.2?

Thanks,