VulnerabilityModified

CVE-2016-0684

Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.

MEDIUM 6.5EPSS 1.89%

Does this matter?

Lower severity and a low EPSS score (1.89%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.

CVSS 3.0: 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 1.89% probability · 78th percentile
CISA KEV: Not listed
Affected: oracle/micros arspos
Source: secalert_us@oracle.com

References

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlVendor Advisory
http://www.securitytracker.com/id/1035600
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlVendor Advisory
http://www.securitytracker.com/id/1035600

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.