Oracle Retail Open Commerce Platform Cloud Service vulnerabilities

4 CVEs affecting Oracle Retail Open Commerce Platform Cloud Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-10173, published 2017-08-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0522, published 2016-01-21. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, and 5.0 allows remote attackers to affect confidentiality,…
CVE-2017-10173, published 2017-08-08. Medium severity, CVSS 5.8. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Website). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0…
CVE-2017-10172, published 2017-08-08. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Framework). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1,…
CVE-2017-3451, published 2017-04-24. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web). Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and…