How severe is CVE-2017-10427?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Oracle Retail_xstore_point_of_service

CVE-2017-10427

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulner…

EPSS: 0.005 (65.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L.

Affected products

Oracle Retail_xstore_point_of_service — versions 6.0.11, 6.5.11, 7.0.6
Oracle Corporation Retail Xstore Point Of Service — versions 7.1.6, 15.0.1, 7.0.6

References

secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert_us@oracle.com (vdb-entry, x_refsource_BID)
secalert_us@oracle.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-10427?: CVE-2017-10427 is a medium-severity vulnerability in Oracle Retail_xstore_point_of_service. CVSS score: 6.5/10. Published 2017-10-19.
How severe is CVE-2017-10427?: Medium severity. CVSS v3 base score is 6.5 out of 10.