WaratekVRT Sign in

Medium Oracle Retail Applications CVEs

109 CVEs, 3 exploited, 20 protected by Waratek

Reset
More filters (1)
Columns
Oracle product: Oracle Retail Applications✕
Overview 109 matches · 20 protected · 3 exploited · 0 CISA KEV · 5 public PoC · 3 EPSS ≥ 0.5
109matches 20protected18.3% 3exploited2.8% 0CISA KEV0.0% 5public PoC4.6% 3EPSS ≥ 0.52.8%
Protected by Waratek 20 18.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 89 81.7%
Critical 0 0.0% High 0 0.0% Medium 109 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 20 18.3% partly blocked 0 0.0% not blocked 89 81.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 2.8% Working exploit published 2 1.8% Proof of concept only 6 5.5% Forecast only 0 0.0% No public exploit 98 89.9%
split by peak 20 / year
No exploit published: 89Protected by Waratek: 20 Medium: 109 not blocked: 89blocked by ARMR today: 20 No public exploit: 98Proof of concept only: 6Working exploit published: 2Exploited: 3
20155 Protected by Waratek1 No exploit published4 Medium5 blocked by ARMR today1 not blocked4 No public exploit5 20168 Protected by Waratek1 No exploit published7 Medium8 blocked by ARMR today1 not blocked7 No public exploit8 20178 Protected by Waratek1 No exploit published7 Medium8 blocked by ARMR today1 not blocked7 No public exploit8 201814 Protected by Waratek1 No exploit published13 Medium14 blocked by ARMR today1 not blocked13 No public exploit14 201911 Protected by Waratek3 No exploit published8 Medium11 blocked by ARMR today3 not blocked8 Proof of concept only1 No public exploit10 20209 Protected by Waratek1 No exploit published8 Medium9 blocked by ARMR today1 not blocked8 No public exploit9 202111 Protected by Waratek5 No exploit published6 Medium11 blocked by ARMR today5 not blocked6 Exploited3 Working exploit published1 No public exploit7 20226 Protected by Waratek3 No exploit published3 Medium6 blocked by ARMR today3 not blocked3 Proof of concept only1 No public exploit5 20236 Protected by Waratek1 No exploit published5 Medium6 blocked by ARMR today1 not blocked5 No public exploit6 20246 Protected by Waratek1 No exploit published5 Medium6 blocked by ARMR today1 not blocked5 Proof of concept only1 No public exploit5 20255 No exploit published5 Medium5 not blocked5 Proof of concept only1 No public exploit4 202620 Protected by Waratek2 No exploit published18 Medium20 blocked by ARMR today2 not blocked18 Working exploit published1 Proof of concept only2 No public exploit17
201520162017201820192020202120222023202420252026
109 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-0684 Medium 2016-04-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Applications 1.5 allows remote authenticated users to affect confidentiality via vectors related to POS.
CVE-2016-0469 Medium 2016-04-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.89.0.0 allows local users to affect confidentiality via vectors related to POS.
CVE-2016-0506 Medium 2016-01-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.
CVE-2016-0496 Medium 2016-01-21 No exploit published No public exploit Unspecified vulnerability in the MICROS CWDirect component in Oracle Retail Applications 12.5, 13.0, 14.0, 15.0, 16.0, 17.0, and 18.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry.
CVE-2015-4827 Medium 2015-10-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework.
CVE-2015-0494 Medium 2015-04-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2015-0466 Medium 2015-04-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2015-0250 Medium 2015-03-24 Protected by Waratek No public exploit XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.
CVE-2015-0390 Medium 2015-01-21 No exploit published No public exploit Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sale.
‹ prev page 2 of 2 next ›