ID CVE-2016-0438
Summary Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0437.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*
CVSS
Base: 1.9 (as of 08-06-2016 - 15:09)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:M/Au:N/C:P/I:N/A:N
refmap via4
confirm http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
sectrack 1034718
Last major update 08-06-2016 - 15:09
Published 21-01-2016 - 02:59
Last modified 08-06-2016 - 15:09
Back to Top