CVE-2018-3122 is a difficult-to-exploit vulnerability in the Integrations subcomponent of Oracle Retail Open Commerce Platform versions 6.0, 6.0.1, and 5.3. A low-privileged attacker with network access via HTTP could compromise the platform. Successful exploitation could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data within the platform. The vulnerability has a CVSS 3.0 Base Score of 6.8 (Medium), indicating significant confidentiality and integrity impacts, but no availability impact. Its attack vector is network-based, but attack complexity is high, and it requires low privileges. There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for the vast majority of vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.3CPE matchmatch criteria | cpe:2.3:a:oracle:retail_open_commerce_platform:5.3:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:a:oracle:retail_open_commerce_platform:6.0:*:*:*:*:*:*:* | ||
6.0.1CPE matchmatch criteria | cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.