CVE-2018-3315

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Customer). Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. While the vulnerability is in Oracle Retail Customer Management and Segmentation Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Retail Customer Management and Segmentation Foundation accessible data as well as unauthorized access to critical data or complete access to all Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlPatch, Vendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlPatch, Vendor Advisory

Published

Jul 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3304Vulnerability in the Oracle Application Testing Suite compon…
• CVE-2018-3305Vulnerability in the Oracle Application Testing Suite compon…
• CVE-2018-3309Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2018-3311Vulnerability in the Oracle Retail Xstore Payment component …
• CVE-2018-3312Vulnerability in the Oracle Retail Customer Engagement compo…
• CVE-2018-3314Vulnerability in the MICROS Relate CRM Software component of…
• CVE-2018-3316Vulnerability in the Oracle Retail Customer Management and S…
• CVE-2018-3560In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2018-3561In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2018-3562Buffer over -read can occur while processing a FILS authenti…
• CVE-2018-3563In Qualcomm Android for MSM, Firefox OS for MSM, and QRD And…
• CVE-2018-3564In the FastRPC driver in Android releases from CAF using the…