ID CVE-2016-0435
Summary Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_applications:14.1:*:*:*:*:*:*:*
CVSS
Base: 3.3 (as of 09-06-2016 - 18:20)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:L/AC:M/Au:N/C:P/I:P/A:N
refmap via4
confirm http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
sectrack 1034718
Last major update 09-06-2016 - 18:20
Published 21-01-2016 - 02:59
Last modified 09-06-2016 - 18:20
Back to Top