VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Oct 16, 2019· Updated Jun 17, 2026

CVE-2019-2896

CVE-2019-2896

Description

Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component: Internal Operations). Supported versions that are affected are 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Relate CRM Software. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MICROS Relate CRM Software accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected products

8
  • Oracle Corporation/Retail Applicationsllm-fuzzy
    Range: 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0
  • Oracle Corporation/Micros Relate Customer Relationship Management Software5 versions
    cpe:2.3:a:oracle:micros_relate_customer_relationship_management_software:7.1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:micros_relate_customer_relationship_management_software:7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:micros_relate_customer_relationship_management_software:15.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:micros_relate_customer_relationship_management_software:16.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:micros_relate_customer_relationship_management_software:17.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:micros_relate_customer_relationship_management_software:18.0.0:*:*:*:*:*:*:*
  • Oracle Corporation/Micros Relate CRM Softwarellm-fuzzy2 versions
    7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0+ 1 more
    • (no CPE)range: 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0
    • (no CPE)range: 7.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.