CVE-2019-2872

Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications component: Point of Sale. Supported versions that are affected are 17.0.3, 18.0.1 and 19.0.0. Difficult to exploit vulnerability allows physical access to compromise Oracle Retail Xstore Point of...

CVE-2019-2872

CVE-2019-2872 affects Oracle Retail Xstore Point of Service (POS) within Oracle Retail Applications. Affected versions: 17.0.3, 18.0.1, 19.0.0. The vulnerability is local/physical in nature, requiring user interaction, and can lead to unauthorized read/update/delete of some Xstore POS data due to...

CVE-2019-2872

Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications component: Point of Sale. Supported versions that are affected are 17.0.3, 18.0.1 and 19.0.0. Difficult to exploit vulnerability allows physical access to compromise Oracle Retail Xstore Point of...

CVE-2019-2872: Undefined Security Weakness

Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications component: Point of Sale. Supported versions that are affected are 17.0.3, 18.0.1 and 19.0.0. Difficult to exploit vulnerability allows physical access to compromise Oracle Retail Xstore Point of...

Oracle Retail Xstore Point of Service CVE-2019-2872 Local Security Vulnerability

Description Oracle Retail Xstore Point of Service is prone to a local security vulnerability. The 'Point of Sale' component is affected. This vulnerability affects the following supported versions: 17.0.3, 18.0.1 and 19.0.0 Technologies Affected Oracle Retail Xstore Point of Service 17.0.3 Oracle...

PT-2019-3781

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Point of Service versions 17.0.3, 18.0.1, 19.0.0 Description The issue is related to inadequate access control in the Point of Sale component of Oracle Retail Xstore Point of Service. Exploitation of this issue may allow a...

The vulnerability of the Infrastructure component of Oracle Retail Point-of-Service software allows a hacker to gain access to protected information, alter file access rights, or cause partial service disruption.

The vulnerability of the Oracle Retail Point-of-Service software’s infrastructure component is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information, modify file access rights, or cause partial service interruptions...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

Buffer overflow

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558

The CVE-2019-2558 entry concerns Oracle Retail Point-of-Service (part of Oracle Retail Applications, subcomponent Infrastructure). Affected versions are 13.4, 14.0 and 14.1. The vulnerability enables an unauthenticated, network-scoped attacker (via HTTP) to compromise data: possible unauthorized ...

PT-2019-3116

Name of the Vulnerable Software and Affected Versions Oracle Retail Point-of-Service versions 13.4, 14.0, and 14.1 Description The issue is related to insufficient access control in the Oracle Retail Point-of-Service component, allowing an unauthenticated attacker with network access via HTTP to...

CVE-2019-2558: Undefined Security Weakness

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

Apache HTTP Server CVE-2019-0211 Local Privilege Escalation Vulnerability

Description Apache HTTP Server is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the affected application. Apache HTTP Server versions 2.4.38, 2.4.37, 2.4.35, 2.4.34, 2.4.33, 2.4.30, 2.4.29, 2.4.28, 2.4.27, 2.4.26, 2.4.25,...

Unspecified Vulnerability in Oracle Retail Applications Retail Xstore Point of Service Component (CNVD-2019-39866)

Oracle Retail Applications is a set of retail application store solutions from Oracle Corporation. Retail Xstore Point of Service is one of the retail point of service management components. An unspecified vulnerability exists in the Oracle Retail Applications Retail Xstore Point of Service...

CVE-2018-3126

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3126

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3126

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3126

CVE-2018-3126 affects Oracle Retail Xstore Point of Service (Xenvironment) within Oracle Retail Applications. Affected versions are 15.0.2, 16.0.4 and 17.0.2. The vulnerability is difficult to exploit but, if exploited by a high-privilege attacker with network access via HTTP, it can lead to take...