Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Infrastructure). Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Point-of-Service. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Point-of-Service accessible data as well as unauthorized read access to a subset of Oracle Retail Point-of-Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Point-of-Service. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Metrics
Affected Vendors & Products
References
History
Wed, 02 Oct 2024 16:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: oracle
Published: 2019-04-23T18:16:39
Updated: 2024-10-02T16:01:23.122Z
Reserved: 2018-12-14T00:00:00
Link: CVE-2019-2558

Updated: 2024-08-04T18:56:43.828Z

Status : Modified
Published: 2019-04-23T19:32:48.397
Modified: 2024-11-21T04:41:06.767
Link: CVE-2019-2558

No data.