Oracle Retail Applications vulnerabilities

9 CVEs affecting Oracle Retail Applications, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0438, published 2016-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0050, published 2014-04-01. High severity, CVSS 7.5. EPSS: 83.3% chance of exploitation in the next 30 days. MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU…
CVE-2015-0466, published 2015-04-16. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect…
CVE-2015-4827, published 2015-10-21. Medium severity, CVSS 6.4. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors…
CVE-2015-0494, published 2015-04-16. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown…
CVE-2016-0438, published 2016-01-21. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile…
CVE-2016-0437, published 2016-01-21. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile…
CVE-2016-0436, published 2016-01-21. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile…
CVE-2016-0434, published 2016-01-21. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile…
CVE-2016-0435, published 2016-01-21. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors…