Unscored severity · published Apr 16, 2015
CVE-2015-0466
Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Retail Applications · Oracle
12.0; 12.0in; 13.0; 13.1; 13.2; 13.3; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0466
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0466
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
www.securityfocus.com
http://www.securityfocus.com/bid/74093
www.securitytracker.com
http://www.securitytracker.com/id/1032128
More from Retail Applications
7.5
CVE-2014-0050
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service…
–
CVE-2016-0438
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via…
–
CVE-2016-0437
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via…
–
CVE-2016-0436
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via…
–
CVE-2016-0435
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and…