Oracle Retail Xstore Office vulnerabilities

5 CVEs affecting Oracle Retail Xstore Office, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21136, published 2024-07-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-21136, published 2024-07-16. High severity, CVSS 8.6. EPSS: 1.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1.…
CVE-2019-2561, published 2019-07-23. High severity, CVSS 8.2. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 7.0 and 7.1. Easily exploitable…
CVE-2018-3111, published 2019-07-23. High severity, CVSS 7.6. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). The supported version that is affected is 7.1. Easily exploitable…
CVE-2018-3300, published 2019-10-16. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 7.1. Easily exploitable…
CVE-2018-2883, published 2019-07-23. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). Supported versions that are affected are 7.0 and 7.1. Easily exploitable…