Oracle Retail Point-of-Service 14.1.3

CPE Details

Oracle Retail Point-of-Service 14.1.3
oracle
retail_point-of-service
14.1.3
2019-05-22
15h21 +00:00
2019-05-22
15h21 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oracle:retail_point-of-service:14.1.3:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

retail_point-of-service

Version

14.1.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-2862 2018-04-19
00h00 +00:00		 Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: User Interface). Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Point-of-Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Point-of-Service accessible data as well as unauthorized update, insert or delete access to some of Oracle Retail Point-of-Service accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
7.1
High
CVE-2017-12617 2017-10-03
15h00 +00:00		 When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
8.1
High