CVE Feed

    Dashboard / CVE / CVE-2016-5475

    CVE-2016-5475

    Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Install.

    Published:Jul 21, 2016
    Last Modified:Apr 12, 2025
    EPS:Jul 21, 2016
    EPSS Score:0.00704
    CVSS Score:7.6

    Affected Products

    Vendor
    Oracle
    Product
    Retail Service Backbone

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-23437 (CVSS 6.5) — There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML…
    CVE-2021-45105 (CVSS 5.9) — Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolle…
    CVE-2021-40690 (CVSS 7.5) — All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue w…
    CVE-2021-2351 (CVSS 8.3) — Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that a…
    CVE-2021-36374 (CVSS 5.5) — When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocat…
    CVE-2021-36373 (CVSS 5.5) — When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memo…
    CVE-2021-29425 (CVSS 4.8) — In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input strin…
    CVE-2020-13936 (CVSS 8.8) — An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system …
    CVE-2020-36183 (CVSS 8.1) — FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and ty…
    CVE-2020-36179 (CVSS 8.1) — FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and ty…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High