Oracle Retail Customer Management Vulnerability in Oracle Retail Applications

CVE-2021-2057

Summary

A vulnerability exists in Oracle Retail Customer Management and Segmentation Foundation that could be exploited by a low-privileged attacker with network access via HTTP. Successful exploitation may enable the attacker to execute unauthorized updates, inserts, or deletions to accessible data. Furthermore, it allows for unauthorized read access to some data and can lead to a partial denial of service. This exposes sensitive information and could compromise the integrity of the data managed by Oracle Retail applications.

References