Oracle Retail Xstore Payment vulnerabilities

2 CVEs affecting Oracle Retail Xstore Payment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3311, published 2019-01-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-7658, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 19.4% chance of exploitation in the next 30 days. In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the…
CVE-2018-3311, published 2019-01-16. High severity, CVSS 8.6. EPSS: 1.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications (subcomponent: Security). The supported version that is affected is 3.3. Easily exploitable vulnerability…