Vulnerability in Oracle Retail Open Commerce Platform Affects Integrations
CVE-2018-3122

6.8MEDIUM

Key Information:

Vendor

Oracle
Status
Retail Open Commerce Platform Cloud Service
Vendor
CVE Published:
17 October 2018

What is CVE-2018-3122?

This vulnerability in the Oracle Retail Open Commerce Platform component allows low-privileged attackers with network access via HTTP to exploit the system. Successful exploitation grants unauthorized capabilities to create, delete, or modify critical data, posing a significant risk to data confidentiality and integrity across the affected versions (5.3, 6.0, and 6.0.1). As a result, sensitive information may be exposed, leading to potential data breaches if not properly mitigated.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Retail Open Commerce Platform Cloud Service 6.0

Retail Open Commerce Platform Cloud Service 6.0.1

Retail Open Commerce Platform Cloud Service 5.3

References

http://www.securityfocus.com/bid/105593
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.