CVE-2018-3311
First published: Wed Jan 16 2019(Updated: )
Vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications (subcomponent: Security). The supported version that is affected is 3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Payment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Xstore Payment accessible data as well as unauthorized update, insert or delete access to some of Oracle Retail Xstore Payment accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Xstore Payment. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Retail Xstore Payment | =3.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-3311?
CVE-2018-3311 is a vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications (subcomponent: Security).
What is the severity of CVE-2018-3311?
CVE-2018-3311 has a severity rating of 8.6 (high).
How does CVE-2018-3311 affect Oracle Retail Xstore Payment?
CVE-2018-3311 allows an unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Payment.
What is the affected version of Oracle Retail Xstore Payment for CVE-2018-3311?
The affected version of Oracle Retail Xstore Payment for CVE-2018-3311 is 3.3.
Is there a fix available for CVE-2018-3311?
Yes, please refer to the Oracle Security Advisory [link] for information on available patches or updates.
- collector/nvd-index
- agent/references
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle retail xstore payment
- version/oracle retail xstore payment/3.3