CVE-2019-2896
First published: Wed Oct 16 2019(Updated: )
Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component: Internal Operations). Supported versions that are affected are 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Relate CRM Software. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MICROS Relate CRM Software accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Micros Relate Customer Relationship Management Software | =7.1.0 | |
| Oracle Micros Relate Customer Relationship Management Software | =15.0.0 | |
| Oracle Micros Relate Customer Relationship Management Software | =16.0.0 | |
| Oracle Micros Relate Customer Relationship Management Software | =17.0.0 | |
| Oracle Micros Relate Customer Relationship Management Software | =18.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-2896?
CVE-2019-2896 has been classified as a difficult to exploit vulnerability.
What versions of Oracle Micros Relate CRM Software are affected by CVE-2019-2896?
CVE-2019-2896 affects versions 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0 of Oracle Micros Relate CRM Software.
How can I mitigate the risks associated with CVE-2019-2896?
To mitigate the risks of CVE-2019-2896, ensure that your Oracle Micros Relate CRM Software is updated to a patched version.
Who can exploit the CVE-2019-2896 vulnerability?
CVE-2019-2896 can be exploited by an unauthenticated attacker with network access via HTTP.
What is the potential impact of CVE-2019-2896?
The potential impact of CVE-2019-2896 includes unauthorized access to functionalities of the Oracle Micros Relate CRM Software.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/references
- agent/author
- agent/remedy
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle micros relate customer relationship management software
- version/oracle micros relate customer relationship management software/7.1.0
- version/oracle micros relate customer relationship management software/15.0.0
- version/oracle micros relate customer relationship management software/16.0.0
- version/oracle micros relate customer relationship management software/17.0.0
- version/oracle micros relate customer relationship management software/18.0.0