CVE-2018-3115
First published: Wed Oct 17 2018(Updated: )
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Sales Audit. While the vulnerability is in Oracle Retail Sales Audit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Sales Audit accessible data as well as unauthorized update, insert or delete access to some of Oracle Retail Sales Audit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Sales Audit. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Retail Sales Audit | =15.0 | |
| Oracle Retail Sales Audit | =16.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-3115?
CVE-2018-3115 is a vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications.
What versions of Oracle Retail Sales Audit are affected by CVE-2018-3115?
Versions 15.0 and 16.0 of Oracle Retail Sales Audit are affected by CVE-2018-3115.
How can CVE-2018-3115 be exploited?
CVE-2018-3115 can be exploited by a low privileged attacker with network access via HTTP.
What is the severity of CVE-2018-3115?
CVE-2018-3115 has a severity level of 7.7 (high).
How can I fix CVE-2018-3115?
To fix CVE-2018-3115, it is recommended to apply the necessary patches provided by Oracle.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/remedy
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle retail sales audit
- version/oracle retail sales audit/15.0
- version/oracle retail sales audit/16.0