CVE-2018-2888

The CVE-2018-2888 issue affects Oracle MICROS Retail-J (Back Office) components in Oracle Retail Applications, across versions 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. The vulnerability allows unauthorized access and data modification with the attacker needing physical acces...

CVE-2018-2888

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J...

CVE-2018-3052

CVE-2018-3052 affects Oracle Retail Applications MICROS Relate CRM Software (Internal Operations). Affected versions: 10.8.x and 11.4.x. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise MICROS Relate CRM Software, potentially enabling unauthorized update...

CVE-2018-2882

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Interfaces. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...

CVE-2018-2888

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J...

CVE-2018-2891

Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications subcomponent: BDI Job Scheduler. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reta...

Oracle Retail Applications Retail Point-of-Service Component Unauthorized Operation Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Retail Point-of-Service is one of the retail point-of-service management components. A security vulnerability exists in the User Interface subcomponent of the Retail Point-of-Servic...

Oracle Retail Applications Retail Integration Bus Component Unauthorized Operation Vulnerability

Oracle Retail Applications is a set of retail application store solutions from Oracle Corporation. Retail Integration Bus is one of the components that provides real-time messaging for retailers' surveys. A security vulnerability exists in the RIB Kernal Apache Commons Collections subcomponent of...

CVE-2018-2876

Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications subcomponent: RIB KernalApache Commons Collections. The supported version that is affected is 13.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2018-2861

Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Buffer overflow

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: User Interface. Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2737

Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-2737

CVE-2018-2737 impacts Oracle Retail Returns Management, a subcomponent of Oracle Retail Applications. Affected versions are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. The vulnerability allows an unauthenticated remote attacker over HTTP to read, and update/insert/delete, data in the Security area of Oracle...

CVE-2018-2840

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xstore Office. Supported versions that are affected are 6.5.11, 7.0.6, 7.1.6, 15.0.1 and 16.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

CVE-2018-2876

Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications subcomponent: RIB KernalApache Commons Collections. The supported version that is affected is 13.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2018-2738

CVE-2018-2738 affects Oracle Retail Central Office (Security subcomponent) within Oracle Retail Applications. Connected sources confirm affected versions: 13.4.9, 14.0.4, and 14.1.3. The vulnerability is exploitable over HTTP with network access and unauthenticated, enabling an attacker to author...

CVE-2018-2876

CVE-2018-2876 affects Oracle Retail Integration Bus (RIB Kernel) in Oracle Retail Applications, version 13.2. The flaw lies in the RIB Kernel (Apache Commons Collections) subcomponent, enabling an unauthenticated network attacker to access Oracle RIB data and potentially perform unauthorized upda...

CVE-2018-2876

Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications subcomponent: RIB KernalApache Commons Collections. The supported version that is affected is 13.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2018-2730

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Cross Pillar. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail...