deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0709
Published: 2018-07-17
Description: Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148515/QNAP-Qcenter-Virtual-Appliance-1.6.x-Information-Disclosure-Command-Injection.html; http://seclists.org/fulldisclosure/2018/Jul/45; https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities
CVE: CVE-2018-0710
Published: 2018-07-17
Description: Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148515/QNAP-Qcenter-Virtual-Appliance-1.6.x-Information-Disclosure-Command-Injection.html; http://seclists.org/fulldisclosure/2018/Jul/45; https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities
CVE: CVE-2018-14329
Published: 2018-07-17
Description: In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-59, CWE-362
References: https://github.com/samtools/htslib/issues/736; https://github.com/samtools/htslib/issues/736
CVE: CVE-2018-14331
Published: 2018-07-17
Description: An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/rebill/xiaocms-x1/issues/1; https://github.com/rebill/xiaocms-x1/issues/1
CVE: CVE-2018-14333
Published: 2018-07-17
Description: TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for attackers to obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: https://github.com/vah13/extractTVpasswords; https://github.com/vah13/extractTVpasswords
CVE: CVE-2018-14334
Published: 2018-07-17
Description: manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/joyplus/joyplus-cms/issues/428; https://github.com/joyplus/joyplus-cms/issues/428
CVE: CVE-2018-14337
Published: 2018-07-17
Description: The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/mruby/mruby/issues/4062; https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html; https://github.com/mruby/mruby/issues/4062
CVE: CVE-2018-13864
Published: 2018-07-17
Description: A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted HTTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.playframework.com/security/vulnerability/CVE-2018-13864-PathTraversal; https://www.playframework.com/security/vulnerability/CVE-2018-13864-PathTraversal
CVE: CVE-2018-14338
Published: 2018-07-17
Description: samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://github.com/Exiv2/exiv2/issues/382; https://github.com/Exiv2/exiv2/issues/382
CVE: CVE-2018-6681
Published: 2018-07-17
Description: Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10244; https://kc.mcafee.com/corporate/index?page=content&id=SB10244
CVE: CVE-2018-13858
Published: 2018-07-17
Description: MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?action=reboot" for example.
CVSS Score: 9.8 (CRITICAL)
References: https://vulncode.com/advisory/CVE-2018-13858; https://vulncode.com/advisory/CVE-2018-13858
CVE: CVE-2018-13859
Published: 2018-07-17
Description: MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" (a successful attack will allow attackers to login without authorization).
CVSS Score: 9.8 (CRITICAL)
References: http://update.trivum.com/update/v9-changes.html; https://vulncode.com/advisory/CVE-2018-13859; https://www.exploit-db.com/exploits/45088/
CVE: CVE-2018-13860
Published: 2018-07-17
Description: MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 allows unauthorized remote attackers to obtain sensitive information via the "/xml/menu/getObjectEditor.xml" URL, using a "?oid=systemSetup&id=_0" or "?oid=systemUsers&id=_0" GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://update.trivum.com/update/v9-changes.html; https://vulncode.com/advisory/CVE-2018-13860; http://update.trivum.com/update/v9-changes.html
CVE: CVE-2018-13861
Published: 2018-07-17
Description: Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?action=reboot" for example.
CVSS Score: 9.8 (CRITICAL)
References: https://vulncode.com/advisory/CVE-2018-13861; https://vulncode.com/advisory/CVE-2018-13861
CVE: CVE-2018-13862
Published: 2018-07-17
Description: Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" (a successful attack will allow attackers to login without authorization).
CVSS Score: 9.8 (CRITICAL)
References: http://update.trivum.com/update/tp9-changes.html; https://vulncode.com/advisory/CVE-2018-13862; https://www.exploit-db.com/exploits/45063/
CVE: CVE-2018-14345
Published: 2018-07-17
Description: An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and helper/backend/PamBackend.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-613
References: https://bugzilla.suse.com/show_bug.cgi?id=1101450; https://github.com/sddm/sddm/commit/147cec383892d143b5e02daa70f1e7def50f5d98; https://bugzilla.suse.com/show_bug.cgi?id=1101450
CVE: CVE-2018-14346
Published: 2018-07-17
Description: GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.gnu.org/archive/html/bug-libextractor/2018-07/msg00001.html; https://gnunet.org/git/libextractor.git/commit/?id=ad19e7fe0adc99d5710eff1ed48d91a7b75a950e; https://lists.debian.org/debian-lts-announce/2018/08/msg00025.html
CVE: CVE-2018-14347
Published: 2018-07-17
Description: GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://lists.gnu.org/archive/html/bug-libextractor/2018-07/msg00000.html; https://gnunet.org/bugs/view.php?id=5399; https://gnunet.org/git/libextractor.git/commit/?id=f033468cd36e2b8bf92d747fbd683b2ace8da394
CVE: CVE-2018-1612
Published: 2018-07-17
Description: IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. IBM X-Force ID: 144164.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg22017062; https://exchange.xforce.ibmcloud.com/vulnerabilities/144164; https://www.exploit-db.com/exploits/45005/
CVE: CVE-2018-14349
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/36a[PII_REDACTED]7f34ce9c94606195f2ac643fed1; https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416
CVE: CVE-2018-14350
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.mutt.org/news.html; http://www.securityfocus.com/bid/104931; https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485
CVE: CVE-2018-14351
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/3c49c44be9b459d9c616bcaef6eb5d51298c1741; https://gitlab.com/muttmua/mutt/commit/e57a8602b45f58edf7b3ffb61bb17525d75dfcb1
CVE: CVE-2018-14352
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db[PII_REDACTED]6caf3850cd4; https://gitlab.com/muttmua/mutt/commit/e0131852c[PII_REDACTED]893016c8ff56b6e42865d
CVE: CVE-2018-14353
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23; https://gitlab.com/muttmua/mutt/commit/e0131852c[PII_REDACTED]893016c8ff56b6e42865d
CVE: CVE-2018-14354
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.mutt.org/news.html; http://www.securityfocus.com/bid/104925; https://access.redhat.com/errata/RHSA-2018:2526
CVE: CVE-2018-14355
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d; https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d
CVE: CVE-2018-14356
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-824
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82; https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6
CVE: CVE-2018-14357
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.mutt.org/news.html; https://access.redhat.com/errata/RHSA-2018:2526; https://github.com/neomutt/neomutt/commit/e[PII_REDACTED]4443ae0206cab2d7caef381646725
CVE: CVE-2018-14358
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485; https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870
CVE: CVE-2018-14359
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://www.mutt.org/news.html; https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85; https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db[PII_REDACTED]c0bbbebce669a
CVE: CVE-2018-14360
Published: 2018-07-17
Description: An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/neomutt/neomutt/commit/6296f7153f0c9d5e5cd3aaf08f9731e56621bdd3; https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html; https://neomutt.org/2018/07/16/release
CVE: CVE-2018-14361
Published: 2018-07-17
Description: An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/neomutt/neomutt/commit/9e927affe3a021175f354af5fa01d22657c20585; https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html; https://neomutt.org/2018/07/16/release
CVE: CVE-2018-14362
Published: 2018-07-17
Description: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.mutt.org/news.html; https://access.redhat.com/errata/RHSA-2018:2526; https://github.com/neomutt/neomutt/commit/9bfab[PII_REDACTED]4483f8f9ed60820bdec9be59e
CVE: CVE-2018-14363
Published: 2018-07-17
Description: An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/neomutt/neomutt/commit/9bfab[PII_REDACTED]4483f8f9ed60820bdec9be59e; https://lists.debian.org/debian-lts-announce/2018/08/msg00001.html; https://neomutt.org/2018/07/16/release
CVE: CVE-2018-14373
Published: 2018-07-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-14374
Published: 2018-07-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-14375
Published: 2018-07-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-14378
Published: 2018-07-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-14379
Published: 2018-07-18
Description: MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted MP4 file, because access to the data structure has different expectations about layout as a result of this type confusion.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.openwall.com/lists/oss-security/2018/07/17/1; https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE/
CVE: CVE-2018-14371
Published: 2018-07-18
Description: The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/eclipse-ee4j/mojarra/commit/1b434748d9239f42eae8aa7d37d7a0930c061e24; https://github.com/javaserverfaces/mojarra/issues/4364; https://github.com/eclipse-ee4j/mojarra/commit/1b434748d9239f42eae8aa7d37d7a0930c061e24
CVE: CVE-2018-10871
Published: 2018-07-18
Description: 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker with sufficiently high privileges, such as root or Directory Manager, can query these files in order to retrieve plaintext passwords.
CVSS Score: 3.8 (LOW)
CWE: CWE-312, CWE-312
References: https://access.redhat.com/errata/RHSA-2019:3401; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10871; https://lists.debian.org/debian-lts-announce/2018/08/msg00032.html
CVE: CVE-2018-2598
Published: 2018-07-18
Description: Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption). Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Workbench accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVSS Score: 3.7 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/104787; http://www.securitytracker.com/id/1041294
CVE: CVE-2018-2767
Published: 2018-07-18
Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
CVSS Score: 3.1 (LOW)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/103954; http://www.securitytracker.com/id/1041294
CVE: CVE-2018-2881
Published: 2018-07-18
Description: Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Database). Supported versions that are affected are 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Retail-J. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MICROS Retail-J accessible data as well as unauthorized read access to a subset of MICROS Retail-J accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MICROS Retail-J. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
CVSS Score: 6.3 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/104822; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2018-2882
Published: 2018-07-18
Description: Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Interfaces). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Retail-J. While the vulnerability is in MICROS Retail-J, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MICROS Retail-J accessible data. CVSS 3.0 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).
CVSS Score: 7.7 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/104822; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2018-2888
Published: 2018-07-18
Description: Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MICROS Retail-J, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MICROS Retail-J accessible data as well as unauthorized access to critical data or complete access to all MICROS Retail-J accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MICROS Retail-J. CVSS 3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L).
CVSS Score: 6.7 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/104822; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html