CVE-2018-3115

3 documents3 sources
Severity
7.7HIGH
EPSS
0.9%
top 24.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Retail Sales Audit
Timeline
PublishedOct 17
Latest updateMay 13

Description

Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Sales Audit. While the vulnerability is in Oracle Retail Sales Audit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized acce…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:LExploitability: 1.8 | Impact: 5.3

Affected Packages1 packages

▶NVDoracle/retail_sales_audit15.0, 16.0+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f576-6hpp-xg96: Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights)↗2022-05-13
▶
CVEList
CVE-2018-3115: Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights)↗2018-10-17
▶
CVE-2018-3115 (HIGH CVSS 7.7) | Vulnerability in the Oracle Retail | cvebase.io