Vulnerability in MICROS Relate CRM Software by Oracle
CVE-2018-3314

8.2HIGH

Key Information:

Vendor
Oracle
Status
Micros Relate Crm Software
Vendor
CVE Published:
23 April 2019

Summary

A vulnerability exists in the MICROS Relate CRM Software component of Oracle Retail Applications that allows a low privileged attacker with network access via HTTP to compromise the system. Exploiting this vulnerability can lead to unauthorized creation, modification, or deletion of critical data, affecting the integrity and confidentiality of all data accessible within the MICROS Relate CRM Software. Attackers may gain significant access to sensitive information beyond the CRM itself, posing serious risks to overall data security.

Affected Version(s)

MICROS Relate CRM Software 11.4

References

http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.