Cross-Site Scripting Vulnerability in Oracle Retail Merchandising System

CVE-2018-2730

Summary

The Oracle Retail Merchandising System, part of Oracle Retail Applications, is exposed to a Cross-Site Scripting vulnerability that allows attackers with low privileges and network access via HTTP to exploit the system. This could lead to unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized reading of sensitive information. The potential impact extends beyond the affected product, emphasizing the need for immediate security measures to protect against data leaks and integrity issues.

References