CVE-2018-3312
First published: Tue Apr 23 2019(Updated: )
Vulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications (subcomponent: Segment). Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail Customer Engagement. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Retail Customer Engagement accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Engagement accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Customer Engagement. CVSS 3.0 Base Score 5.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Retail Customer Engagement | =16.0 | |
| Oracle Retail Customer Engagement | =17.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2018-3312?
CVE-2018-3312 is rated as a difficult to exploit vulnerability that allows an attacker with high privileges and network access to compromise Oracle Retail.
How do I fix CVE-2018-3312?
To fix CVE-2018-3312, update Oracle Retail Customer Engagement to a non-vulnerable version as per the security guidelines provided by Oracle.
Which versions are affected by CVE-2018-3312?
CVE-2018-3312 affects Oracle Retail Customer Engagement versions 16.0 and 17.0.
What components are involved in CVE-2018-3312?
CVE-2018-3312 impacts the Oracle Retail Customer Engagement component specifically within the Segment subcomponent.
Who is at risk with CVE-2018-3312?
Organizations using the affected versions of Oracle Retail Customer Engagement are at risk of exploitation due to CVE-2018-3312.
- agent/type
- agent/softwarecombine
- agent/references
- agent/author
- agent/remedy
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle retail customer engagement
- version/oracle retail customer engagement/16.0
- version/oracle retail customer engagement/17.0