Back

CVE-2016-3444

CRITICAL

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.

Published: Jul 21, 2016 Modified: Jun 17, 2026
NVD-CWE-noinfo

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (6)

Vendor Product Version
oracle retail_integration_bus 13.0
oracle retail_integration_bus 13.1
oracle retail_integration_bus 13.2
oracle retail_integration_bus 14.0
oracle retail_integration_bus 14.1
oracle retail_integration_bus 15.0

GitHub Security Advisory GHSA-87r8-qrfr-rq8r

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail...

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 5.48%

Top 8% most likely to be exploited

Threat Score 40.8 / 100

Data Sources

NVD EPSS GitHub