Oracle Retail Xstore Point of Service CVE-2019-2872 Local Security Vulnerability

Description Oracle Retail Xstore Point of Service is prone to a local security vulnerability. The 'Point of Sale' component is affected. This vulnerability affects the following supported versions: 17.0.3, 18.0.1 and 19.0.0 Technologies Affected Oracle Retail Xstore Point of Service 17.0.3 Oracle...

The vulnerability of the Infrastructure component of Oracle Retail Point-of-Service software allows a hacker to gain access to protected information, alter file access rights, or cause partial service disruption.

The vulnerability of the Oracle Retail Point-of-Service software’s infrastructure component is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information, modify file access rights, or cause partial service interruptions...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

Buffer overflow

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558

The CVE-2019-2558 entry concerns Oracle Retail Point-of-Service (part of Oracle Retail Applications, subcomponent Infrastructure). Affected versions are 13.4, 14.0 and 14.1. The vulnerability enables an unauthenticated, network-scoped attacker (via HTTP) to compromise data: possible unauthorized ...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

Apache HTTP Server CVE-2019-0211 Local Privilege Escalation Vulnerability

Description Apache HTTP Server is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the affected application. Apache HTTP Server versions 2.4.38, 2.4.37, 2.4.35, 2.4.34, 2.4.33, 2.4.30, 2.4.29, 2.4.28, 2.4.27, 2.4.26, 2.4.25,...

Unspecified Vulnerability in Oracle Retail Applications Retail Xstore Point of Service Component (CNVD-2019-39866)

Oracle Retail Applications is a set of retail application store solutions from Oracle Corporation. Retail Xstore Point of Service is one of the retail point of service management components. An unspecified vulnerability exists in the Oracle Retail Applications Retail Xstore Point of Service...

CVE-2018-3126

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3126

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3126

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3126

CVE-2018-3126 affects Oracle Retail Xstore Point of Service (Xenvironment) within Oracle Retail Applications. Affected versions are 15.0.2, 16.0.4 and 17.0.2. The vulnerability is difficult to exploit but, if exploited by a high-privilege attacker with network access via HTTP, it can lead to take...

Oracle Retail Applications Retail Point-of-Service Component Unauthorized Operation Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Retail Point-of-Service is one of the retail point-of-service management components. A security vulnerability exists in the User Interface subcomponent of the Retail Point-of-Servic...

CVE-2018-2862

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: User Interface. Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2862

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: User Interface. Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2840

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xstore Office. Supported versions that are affected are 6.5.11, 7.0.6, 7.1.6, 15.0.1 and 16.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

Design/Logic Flaw

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xstore Office. Supported versions that are affected are 6.5.11, 7.0.6, 7.1.6, 15.0.1 and 16.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

CVE-2018-2862

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: User Interface. Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2862

The CVE-2018-2862 entry concerns Oracle Retail Applications’ Retail Point-of-Service component (User Interface). Affected are versions 13.3.8, 13.4.9, 14.0.4 and 14.1.3. The vulnerability enables a low-privileged, network-based attacker able to reach the service over HTTP to access and potentiall...