Xenvironment Component Privilege Escalation

The vulnerability of the Xenvironment component in the Oracle Retail Xstore Point of Service software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP protocol...

Design/Logic Flaw

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3126: Undefined Security Weakness

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xenvironment. Supported versions that are affected are 15.0.2, 16.0.4 and 17.0.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

PT-2018-2281

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Point of Service versions 15.0.2, 16.0.4, 17.0.2 Description The issue is related to inadequate access control in the Oracle Retail Xstore Point of Service component, specifically in the Xenvironment subcomponent. It allow...