5.9
CVE-2019-2896
- EPSS 1.97%
- Published 16.10.2019 18:15:27
- Last modified 21.11.2024 04:41:45
- Source secalert_us@oracle.com
- Teams watchlist Login
- Open Login
Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component: Internal Operations). Supported versions that are affected are 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Relate CRM Software. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MICROS Relate CRM Software accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Micros Relate Customer Relationship Management Software Version7.1.0
Oracle ≫ Micros Relate Customer Relationship Management Software Version15.0.0
Oracle ≫ Micros Relate Customer Relationship Management Software Version16.0.0
Oracle ≫ Micros Relate Customer Relationship Management Software Version17.0.0
Oracle ≫ Micros Relate Customer Relationship Management Software Version18.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.97% | 0.819 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|