CVE-2016-0435 - Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applicati

CVE-2016-0435

Summary

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS.

References

Vulnerable Configurations

cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*

CVSS

Base:	3.3 (as of 09-06-2016 - 18:20)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:L/AC:M/Au:N/C:P/I:P/A:N

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
sectrack	1034718

Last major update

09-06-2016 - 18:20

Published

21-01-2016 - 02:59

Last modified

09-06-2016 - 18:20