Threats affecting pkg:maven/com.oracle.retail/xstore-point-of-service

CVE-2026-21953 is a vulnerability in Oracle Retail Xstore Point of Service version 21.0.3. It allows a low privileged attacker with logon access to the infrastructure where the product runs to gain unauthorized read access to some accessible data. The vulnerability has a low severity with a CVSS score of 3.3, impacting confidentiality without affecting integrity or availability.