CVE-2026-21953: Low severity Oracle Oracle Retail Xstore Point of Service vulnerability
Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 21.0.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Retail Xstore Point of Service executes to compromise Oracle Retail Xstore Point of Service. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Retail Xstore Point of Service accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21953?
The severity of CVE-2026-21953 is classified as low with a score of 3.3.
How do I fix CVE-2026-21953?
To fix CVE-2026-21953, it is recommended to update to a patched version of Oracle Retail Xstore Point of Service.
What components are affected by CVE-2026-21953?
CVE-2026-21953 affects the Oracle Retail Xstore Point of Service product, specifically the Xstore Mobile component.
Who can exploit CVE-2026-21953?
CVE-2026-21953 can be exploited by a low privileged attacker with logon access to the infrastructure where Oracle Retail Xstore is deployed.
What is the published date of CVE-2026-21953?
CVE-2026-21953 was published on July 21, 2026.