CVE-2019-2558
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Infrastructure). Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Point-of-Service. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Point-of-Service accessible data as well as unauthorized read access to a subset of Oracle Retail Point-of-Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Point-of-Service. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Vulnerabilidad en el componente Oracle Retail Point-of-Service de Oracle Retail Applications (subcomponente: Infrastructure). Las versiones compatibles que se ven afectadas son 13.4, 14.0 y 14.1. Vulnerabilidad de fácil explotación que permite a atacante no autenticado con acceso a la red por medio de HTTP comprometer Oracle Retail Point-of-Service . Los ataques con éxito de esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Retail Point-of-Service, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles del Punto de Servicio de Oracle Retail y la capacidad no autorizada de provocar una Denegación de Servicio (DoS) parcial de Oracle Retail Point-of-Service. CVSS versión 3.0 Puntuación Base 7.3 (Impactos de confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2018-12-14 CVE Reserved
- 2019-04-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-10-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html | 2020-08-24 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Oracle Search vendor "Oracle" | Retail Point-of-service Search vendor "Oracle" for product "Retail Point-of-service" | 13.4 Search vendor "Oracle" for product "Retail Point-of-service" and version "13.4" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Retail Point-of-service Search vendor "Oracle" for product "Retail Point-of-service" | 14.0 Search vendor "Oracle" for product "Retail Point-of-service" and version "14.0" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Retail Point-of-service Search vendor "Oracle" for product "Retail Point-of-service" | 14.1 Search vendor "Oracle" for product "Retail Point-of-service" and version "14.1" | - |
Affected
|