CVE-2018-3120

CVE-2018-3120 affects Oracle Retail Applications MICROS Lucas, specifically the Security subcomponent, with affected versions 2.9.5.6 and 2.9.5.7. The vulnerability is exploitable by a low-privileged attacker who can access the system over HTTP, enabling takeover of MICROS Lucas. The CVE’s connec...

CVE-2018-3314

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Customer. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Relate CRM Software...

CVE-2018-2880

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successful attacks...

CVE-2018-2880

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successful attacks...

CVE-2018-3120

Vulnerability in the MICROS Lucas component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 2.9.5.6 and 2.9.5.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Lucas. Successful...

CVE-2018-3314

The CVE-2018-3314 entry affects Oracle Retail Applications MICROS Relate CRM Software, Customer subcomponent, version 11.4. The vulnerability description indicates a network-accessible issue via HTTP that could allow a low-privilege attacker to unauthorizedly create, modify, or delete data, impac...

Oracle Retail Applications Retail Customer Engagement Access Control Error Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation. The product includes inventory management, sales management and customer management, etc. Retail Customer Engagement is one of the retailer customer engagement components, mainly used to interact...

Oracle Retail Applications Retail Convenience Store Back Office Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management , etc. Retail Convenience Store Back Office is one of the retail back office components. A securi...

CVE-2018-3311

Vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications subcomponent: Security. The supported version that is affected is 3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Payment...

CVE-2018-3125

CVE-2018-3125 affects Oracle Retail Merchandising System (Oracle Retail Applications), specifically the Security (SQL Logger) subcomponent. Affected version 14.1 is vulnerable to unauthenticated HTTP access that can lead to unauthorized read, update, insert, or delete operations on Oracle Retail ...

Unspecified Vulnerability in Oracle Retail Applications Retail Sales Audit Component

Oracle Retail Applications is a set of retail applications store solutions of Oracle Corporation Oracle. Retail Sales Audit is one of the audit components. An unspecified vulnerability exists in the Oracle Retail Applications Retail Sales Audit component. An attacker could use this vulnerability ...

Oracle Retail Applications MICROS Retail-J Component Override Access Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. An over-the-horizon access vulnerability exists in the Back Office subcomponent of the MICROS Retail-J component of...

CVE-2018-2887

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successf...

CVE-2018-2889

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Internal Operations. The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successful...

CVE-2018-2889

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Internal Operations. The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successful...

Code injection

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 13.0.0 and 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successf...

Code injection

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Internal Operations. The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successful...

Buffer overflow

Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications subcomponent: Operational Insights. Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-2889

CVE-2018-2889 affects Oracle MICROS Retail-J (Internal Operations) in Oracle Retail Applications, version 12.1.2. The flaw allows an unauthenticated attacker with network access via HTTP to compromise Retail-J, potentially gaining unauthorized access to confidential data. The documents show CVSS ...