Vulnerability in Oracle Retail Xstore Point of Service Affects Multiple Versions

CVE-2019-2872

Summary

A vulnerability exists in Oracle Retail Xstore Point of Service that can be exploited through physical access. This flaw requires that a user with physical presence interact with the system, potentially allowing unauthorized updates, deletions, or insertions of sensitive data. Attackers could gain unauthorized read access to specific datasets, compromising the integrity and confidentiality of the accessed information. Affected versions include 17.0.3, 18.0.1, and 19.0.0, highlighting the importance of safeguarding physical access to the point of sale systems.

References