PT-2016-4207 · Oracle · Oracle Retail Applications

Published 2016-01-21 · Updated 2016-06-09 · CVE-2016-0435

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Retail Applications versions 13.4 through 14.1

Description The issue affects confidentiality and integrity, allowing local users to exploit it via vectors related to Mobile POS.

Recommendations For versions 13.4 through 14.1, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2016-0435

Affected Products

Oracle Retail Applications

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-0435 · Security Note
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0435 · Vendor Advisory
• http://securitytracker.com/id/1034718 · Note