Unauthenticated Access Vulnerability in Oracle Retail Xstore Point of Service
CVE-2018-2840
What is CVE-2018-2840?
An unauthenticated access vulnerability in Oracle Retail Xstore Point of Service allows attackers with network access to compromise the system. Successful exploitation requires human interaction from a user other than the attacker. This vulnerability can lead to unauthorized access to sensitive data, where attackers may gain full access to the accessible data within Oracle Retail Xstore. Furthermore, it allows unauthorized modifications to the data, including update, insert, or delete operations. Attackers may also leverage this vulnerability to cause a partial denial of service on the system, posing a significant risk to data confidentiality, integrity, and availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Retail Xstore Point of Service 6.5.11
Retail Xstore Point of Service 7.0.6
Retail Xstore Point of Service 7.1.6
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved