CVE-2024-21136: falha de alta gravidade em Oracle Corporation Retail Xstore Office
Publicada em · Atualizada em
58Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 8.6epss 1.8%
da publicação à arma
Publicada no NVD16 de jul.
VulnCheck+327d
probabilidade de exploração
1.8%top 22% das CVEs
exploração observada
simVulnCheck
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Retail Xstore Office accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Oracle Corporation · Retail Xstore OfficeCVEs relacionadas — Oracle Corporation Retail Xstore Office
No mesmo produto, das mais perigosas para as menos.