CVE-2019-2424
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Vulnerability in the Oracle Retail Convenience Store Back Office component of Oracle Retail Applications (subcomponent: Level 3 Maintenance Functions). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Convenience Store Back Office. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Convenience Store Back Office accessible data as well as unauthorized read access to a subset of Oracle Retail Convenience Store Back Office accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Convenience Store Back Office. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Vulnerabilidad en el componente Oracle Retail Convenience Store Back Office de Oracle Retail Applications (subcomponente: Level 3 Maintenance Functions). La versión soportada que se ve afectada es la 3.6. Vulnerabilidad de fácil operación que permite a un atacante no identificado con acceso a la red por medio de HTTP comprometer a Oracle Retail Convenience Store Back Office. Los ataques con éxito de esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Retail Convenience Store Back Office, así como el acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Retail Convenience Store Back Office y la posibilidad no autorizada de causar Denegación de Servicio parcial (partial DOS) de Oracle Retail Convenience Store Back Office. CVSS 3.0 Puntuación Base 7.3 (Impactos de confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2018-12-14 CVE Reserved
- 2019-04-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-10-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html | 2020-08-24 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Oracle Search vendor "Oracle" | Retail Convenience Store Back Office Search vendor "Oracle" for product "Retail Convenience Store Back Office" | 3.6 Search vendor "Oracle" for product "Retail Convenience Store Back Office" and version "3.6" | - |
Affected
|