Skip to content
9.8 Critical

CVE-2020-2953 Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications…

Description

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in takeover of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products and versions

Product Affected versions Fixed in
Retail Customer Management and Segmentation Foundation 18.0 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 17 CVEs of Retail Customer Management and Segmentation Foundation →
Track this CVE