Retail Applications

CVEs (18)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-10065	Oracle Corporation Retail Applications	Hig	0.55	8.5	0.01	Oct 19, 2017	Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10214	Oracle Corporation Retail Xstore Point Of Service	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-5476	Oracle Corporation Retail Integration Bus	Hig	0.50	7.6	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5475	Oracle Corporation Retail Service Backbone	Hig	0.50	7.6	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5539	Oracle Corporation Retail Applications	Hig	0.47	7.3	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-5540	Oracle Corporation Retail Applications	Med	0.44	6.7	0.00	Oct 25, 2016	Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2017-10183	Oracle Corporation Retail Xstore Point Of Service	Med	0.42	6.5	0.01	Aug 8, 2017	Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated…
CVE-2017-10172	Oracle Corporation Retail Applications	Med	0.40	6.1	0.01	Aug 8, 2017	Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Framework). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10423	Oracle Corporation Retail Back Office	Med	0.35	5.4	0.01	Oct 19, 2017	Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2014-0050	Apache Tomcat		0.03	—	0.83	Apr 1, 2014	MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended…
CVE-2016-0438	Oracle Corporation Retail Applications		0.00	—	0.00	Jan 21, 2016	Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and…
CVE-2016-0437	Oracle Corporation Retail Applications		0.00	—	0.00	Jan 21, 2016	Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and…
CVE-2016-0436	Oracle Corporation Retail Applications		0.00	—	0.00	Jan 21, 2016	Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0437, and…
CVE-2016-0435	Oracle Corporation Retail Applications		0.00	—	0.00	Jan 21, 2016	Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS.
CVE-2016-0434	Oracle Corporation Retail Applications		0.00	—	0.00	Jan 21, 2016	Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0436, CVE-2016-0437, and…
CVE-2015-4827	Oracle Corporation Retail Applications		0.00	—	0.02	Oct 21, 2015	Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework.
CVE-2015-0494	Oracle Corporation Retail Applications		0.00	—	0.02	Apr 16, 2015	Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2015-0466	Oracle Corporation Retail Applications		0.00	—	0.02	Apr 16, 2015	Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.

CVE-2017-10065HigOct 19, 2017
Oracle Corporation
Retail Applications
risk 0.55cvss 8.5epss 0.01
Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10214HigAug 8, 2017
Oracle Corporation
Retail Xstore Point Of Service
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2016-5476HigJul 21, 2016
Oracle Corporation
Retail Integration Bus
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5475HigJul 21, 2016
Oracle Corporation
Retail Service Backbone
risk 0.50cvss 7.6epss 0.02
Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.
CVE-2016-5539HigOct 25, 2016
Oracle Corporation
Retail Applications
risk 0.47cvss 7.3epss 0.01
Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-5540MedOct 25, 2016
Oracle Corporation
Retail Applications
risk 0.44cvss 6.7epss 0.00
Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2017-10183MedAug 8, 2017
Oracle Corporation
Retail Xstore Point Of Service
risk 0.42cvss 6.5epss 0.01
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated…
CVE-2017-10172MedAug 8, 2017
Oracle Corporation
Retail Applications
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Framework). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10423MedOct 19, 2017
Oracle Corporation
Retail Back Office
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2014-0050Apr 1, 2014
Apache
Tomcat
risk 0.03cvss —epss 0.83
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended…
CVE-2016-0438Jan 21, 2016
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and…
CVE-2016-0437Jan 21, 2016
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and…
CVE-2016-0436Jan 21, 2016
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0437, and…
CVE-2016-0435Jan 21, 2016
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS.
CVE-2016-0434Jan 21, 2016
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0436, CVE-2016-0437, and…
CVE-2015-4827Oct 21, 2015
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework.
CVE-2015-0494Apr 16, 2015
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2015-0466Apr 16, 2015
Oracle Corporation
Retail Applications
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.