PT-2015-6717

Name of the Vulnerable Software and Affected Versions Oracle Retail Open Commerce Platform version 3.0 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to the Framework component. Recommendations For Oracle Retail Ope...

Unspecified Vulnerability in Oracle Retail Applications Retail Central Office Component

Oracle Retail Applications is a suite of retail application store solutions. A security vulnerability exists in the Oracle Retail Central Office component of Oracle Retail Applications, which can be exploited by remote attackers to manipulate data and compromise system integrity...

Unspecified Vulnerability in Oracle Retail Applications Retail Back Office Component

Oracle Retail Applications is a retail application store solution. A security vulnerability exists in the Oracle Retail Back Office component of Oracle Retail Applications, which can be exploited by remote attackers to compromise system integrity...

CVE-2015-0494

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-0466

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-0494

CVE-2015-0494 concerns the Oracle Retail Central Office component of Oracle Retail Applications (versions 13.1–14.1). The vulnerability is described as unspecified and allows remote attackers to affect integrity via unknown vectors; CVSS notes a network attack vector with partial integrity impact...

CVE-2015-0466

Oracle Retail Applications’ Retail Back Office component (versions 12.0, 12.0IN, 13.0–13.4, 14.0–14.1) contains an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors. Root cause and exploit details are not provided in the connected documents; the NVD en...

CVE-2015-0466: Undefined Security Weakness

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-0494: Undefined Security Weakness

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

Unspecified Vulnerability in Oracle Retail Applications MICROS Retail Component

Oracle Retail is a solution for the global retail industry. It includes functional modules for core merchandise management, data warehousing, store systems, planning and optimization. A security vulnerability in the Xstore Point of Sale subcomponent of the Oracle Retail Applications MICROS Retail...

CVE-2015-0390

Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sal...

CVE-2015-0390

Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sal...

Code injection

Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sal...

CVE-2015-0390

Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sal...

CVE-2015-0390

The CVE-2015-0390 issue is an unspecified vulnerability in Oracle Retail Applications MICROS Retail component (Xstore Point of Sale). Affected is MICROS Retail Xstore: versions 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2. Remote attackers could affect confidentiality,...

CVE-2015-0390: Undefined Security Weakness

Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sal...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

CVE-2013-3814

Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to System Administration...

CVE-2013-3814: Undefined Security Weakness

Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to System Administration...

NGS00423 Patch Notification: Oracle Retail Invoice Manager SQL Injection

High Risk Vulnerability in Oracle Retail Central Office 1 May 2013 Andrew Davies of NCC Group has discovered a High risk vulnerability in Oracle Retail Central Office Impact: SQL Injection Versions affected: Oracle Retail Central Office, versions 13.1, 13.2, 13.3, 13.4 Security patch information...