CyberRota Analysis
AI-GeneratedOracle Retail Xstore Point of Service version 21.0.3 is vulnerable to an easily exploitable attack that allows low-privileged users with access to the infrastructure to gain unauthorized read access to certain data within the system. While the severity is rated low, organizations using this version should prioritize patching to mitigate potential data exposure risks. This vulnerability particularly affects retail environments relying on Oracle's point-of-service solutions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 21.0.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Retail Xstore Point of Service executes to compromise Oracle Retail Xstore Point of Service. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Retail Xstore Point of Service accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Related CVEs
Other vulnerabilities affecting the same vendor(s)