Login Request a demo
Unscored severity · published Jan 21, 2016
CVE-2016-0436
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0437, and CVE-2016-0438.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Retail Applications · Oracle
13.4; 14.0; 14.1 · source: NVD
Affected product
RA
Retail Applications
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-0436
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-0436
Patch
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
www.securitytracker.com
http://www.securitytracker.com/id/1034718
More from Retail Applications
7.5
CVE-2014-0050
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service…
–
CVE-2016-0438
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via…
–
CVE-2016-0437
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via…
–
CVE-2016-0435
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and…
–
CVE-2016-0434
Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via…