Oracle Retail Applications vulnerabilities
9 vulnerabilities
Known vulnerabilities in Oracle Retail Applications, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2016-0438oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0437.CVSS1.9LowEPSS0.38%RoutineCVE-2016-0437oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0438.CVSS1.9LowEPSS0.38%RoutineCVE-2016-0436oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0437, and CVE-2016-0438.CVSS1.9LowEPSS0.38%RoutineCVE-2016-0435oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS.CVSS3.3LowEPSS0.37%RoutineCVE-2016-0434oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0436, CVE-2016-0437, and CVE-2016-0438.CVSS1.9LowEPSS0.38%RoutineCVE-2015-4827oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework.CVSS6.4MediumEPSS1.78%RoutineCVE-2015-0494oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.CVSS4.3MediumEPSS1.50%RoutineCVE-2015-0466oracle · retail_applicationsoracle retail_applicationsUnspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.CVSS4.3MediumEPSS1.90%PrioritiseCVE-2014-0050apache · commons_fileupload +12 moreapache commons_fileuploadMultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.CVSS7.5HighEPSS83.33%