CVE-2024-21136
published 2024-07-16CVE-2024-21136: Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5…
PriorityP179high8.6CVSS 3.1
AVNACLPRNUINSCCHINAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
1.78%
75.5th percentile
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Xstore Office accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | retail_xstore_office | — | — |
| oracle | retail_xstore_office | — | — |
| oracle | retail_xstore_office | — | — |
| oracle | retail_xstore_office | — | — |
| oracle | retail_xstore_office | — | — |
| oracle_corporation | retail_xstore_office | — | — |
| oracle_corporation | retail_xstore_office | — | — |
| oracle_corporation | retail_xstore_office | — | — |
| oracle_corporation | retail_xstore_office | — | — |
| oracle_corporation | retail_xstore_office | — | — |
Detection & IOCsextracted from sources · hover to see the quote
url/xstoremgwt/cheetahImages?imageId=..\..\..\..\windows\win.ini
path/xstoremgwt/cheetahImages
otherhtml:"xstoremgwt"
- →Detect path traversal exploitation attempts targeting the /xstoremgwt/cheetahImages endpoint with backslash-encoded traversal sequences in the imageId parameter (e.g., imageId=..\..\..\..\ patterns).
- →Successful exploitation response body contains Windows INI file artifacts; match on 'for 16-bit app support' AND '[fonts]' in HTTP response body with status 200.
- →Use Shodan query html:"xstoremgwt" to identify exposed Oracle Retail Xstore Office instances on the internet that may be vulnerable.
- →The vulnerability is pre-authenticated (no credentials required) and exploitable over HTTP; monitor for unauthenticated requests to /xstoremgwt/cheetahImages with traversal sequences. ↗
- ·Affected versions are limited to Oracle Retail Xstore Office 19.0.5, 20.0.3, 20.0.4, 22.0.0, and 23.0.1; detections should be scoped to these versions to reduce false positives. ↗
- ·The scope of impact extends beyond the directly targeted product; successful exploitation may affect additional products in the Oracle Retail ecosystem. ↗
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
vulncheck8.6HIGH
vendor_oracle8.6HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2f5p-xhq6-2f67: Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security)
ghsa_unreviewed·2024-07-17
CVE-2024-21136 [HIGH] CWE-200 GHSA-2f5p-xhq6-2f67: Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security)
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Xstore Office accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
VulnCheck
Oracle Retail Xstore Office Pre-Authentication Path Traversal
vulncheck·2024·CVSS 8.6
CVE-2024-21136 [HIGH] Oracle Retail Xstore Office Pre-Authentication Path Traversal
Oracle Retail Xstore Office Pre-Authentication Path Traversal
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Xstore Office accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Af
Oracle
Oracle Oracle Retail Applications Risk Matrix: Security — CVE-2024-21136
vendor_oracle·2024-07-15·CVSS 8.6
CVE-2024-21136 [HIGH] Oracle Oracle Retail Applications Risk Matrix: Security — CVE-2024-21136
Oracle Oracle Retail Applications Risk Matrix: Security vulnerability
CVE: CVE-2024-21136
CVSS: 8.6
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2024 (JUL 2024)
No detection rules found.
Nuclei
Oracle Retail Xstore Suite - Pre-authenticated Path Traversal
nuclei·CVSS 8.6
CVE-2024-21136 [HIGH] Oracle Retail Xstore Suite - Pre-authenticated Path Traversal
Oracle Retail Xstore Suite - Pre-authenticated Path Traversal
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change).
Template:
id: CVE-2024-21136
info:
name: Oracle Retail Xstore Suite - Pre-authenticated Path Traversal
author: DhiyaneshDk
severity: high
description: |
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported ve
No writeups or analysis indexed.
2024-07-16
Published
Exploited in the wild