SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2016-5540

Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.

MEDIUM 6.7EPSS 0.43%

Does this matter?

Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality and integrity via unknown vectors.

CVSS 3.0
6.7 MEDIUMCVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
EPSS
0.43% probability · 36th percentile
CISA KEV
Not listed
Weakness
CWE-254
Affected
oracle/micros xstore payment
Source
secalert_us@oracle.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.