CVE-2018-2883

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 7.0 and 7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Xstore Office. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Xstore Office accessible data as well as unauthorized read access to a subset of Oracle Retail Xstore Office accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Xstore Office. CVSS 3.0 Base Score 5.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L).

• http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlPatch, Vendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlPatch, Vendor Advisory

Published

Jul 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2877Vulnerability in the MySQL Cluster component of Oracle MySQL…
• CVE-2018-2878Vulnerability in the PeopleSoft Enterprise HCM Shared Compon…
• CVE-2018-2879Vulnerability in the Oracle Access Manager component of Orac…
• CVE-2018-2880Vulnerability in the MICROS Retail-J component of Oracle Ret…
• CVE-2018-2881Vulnerability in the MICROS Retail-J component of Oracle Ret…
• CVE-2018-2882Vulnerability in the MICROS Retail-J component of Oracle Ret…
• CVE-2018-2887Vulnerability in the MICROS Retail-J component of Oracle Ret…
• CVE-2018-2888Vulnerability in the MICROS Retail-J component of Oracle Ret…
• CVE-2018-2889Vulnerability in the MICROS Retail-J component of Oracle Ret…
• CVE-2018-2891Vulnerability in the Oracle Retail Bulk Data Integration com…
• CVE-2018-2892Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2018-2893Vulnerability in the Oracle WebLogic Server component of Ora…