Oracle Retail Customer Management Vulnerability in Oracle Retail Applications
CVE-2021-2057
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 20 January 2021
What is CVE-2021-2057?
A vulnerability exists in Oracle Retail Customer Management and Segmentation Foundation that could be exploited by a low-privileged attacker with network access via HTTP. Successful exploitation may enable the attacker to execute unauthorized updates, inserts, or deletions to accessible data. Furthermore, it allows for unauthorized read access to some data and can lead to a partial denial of service. This exposes sensitive information and could compromise the integrity of the data managed by Oracle Retail applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Retail Customer Management and Segmentation Foundation 19.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved