Internal Operations Vulnerability in Oracle Retail Applications
CVE-2018-3053

6.4MEDIUM

Key Information:

Vendor

Oracle
Status
Retail Customer Management And Segmentation Foundation
Vendor
CVE Published:
18 July 2018

What is CVE-2018-3053?

An exploitable vulnerability exists in Oracle Retail Customer Management and Segmentation Foundation that permits a low privileged attacker to gain unauthorized access via HTTP. This flaw, found in versions 16.x and 17.x, enables attackers to manipulate data within the system, allowing unauthorized updates, inserts, or deletions. Additionally, this vulnerability poses risks of causing a partial denial of service, impacting the overall availability of the application and affecting other connected products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Retail Customer Management and Segmentation Foundation 16.x

Retail Customer Management and Segmentation Foundation 17.x

References

http://www.securityfocus.com/bid/104827
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.