13.1

DATE	CVE	VULNERABILITY TITLE	RISK
2013-10-16	CVE-2013-3814	Remote Security vulnerability in Oracle Industry Applications Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to System Administration. network low complexity oracle	5.5
2013-04-17	CVE-2013-2397	SQL Injection vulnerability in Oracle Retail Central Office Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Industry Applications 13.1, 13.2, 13.3, and 13.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Customer Operations (Add, Search). network low complexity oracle	5.5
2013-04-17	CVE-2013-1525	Directory Traversal vulnerability in Oracle Industry Applications 13.0/13.1/13.2 Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Industry Applications 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Retail Integration Bus Manager. network low complexity oracle	4.0