CVE-2017-10316

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications subcomponent: MMSUpdater. The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications subcomponent: MMS. The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

Buffer overflow

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality...

Buffer overflow

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Import/Export. Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10420

Vulnerability CVE-2017-10420 affects Oracle Hospitality Suite8 (Leisure subcomponent). Affected versions are 8.10.1 and 8.10.2. The issue enables a low-privileged, network-accessible attacker (via HTTP) to compromise Suite8, potentially allowing unauthorized updates/deletes to data and a partial ...

CVE-2017-10353

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2017-10319

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10370

CVE-2017-10370 affects Oracle Hospitality Guest Access (Base subcomponent) in Oracle Hospitality Applications, specifically versions 4.2.0 and 4.2.1. The vulnerability allows a high-privilege attacker with network access via HTTP to potentially access or modify data; exploitation requires user in...

CVE-2017-10050

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10318

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10337

CVE-2017-10337 affects the Oracle Hospitality Suite8 (Oracle Hospitality Applications, Leisure subcomponent). Affected versions: 8.10.1 and 8.10.2. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, enabling unauthorized read access to a subset of data and...

CVE-2017-10404

Affected software: Oracle Hospitality Reporting and Analytics, subcomponent iQuery. Affects versions 8.5.1 and 9.0.0. Root cause: unpatched vulnerability in iQuery allows a low-privilege attacker with HTTP network access to compromise Oracle Hospitality Reporting and Analytics, potentially taking...

CVE-2017-10343

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Import/Export. Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10014

CVE-2017-10014 affects the Oracle Hospitality Hotel Mobile component (Suite8/RESTAPI), version 1.1. The vulnerability arises in Oracle Hospitality Applications, allowing a low-privilege attacker with network access via HTTP to potentially modify data, with the attack requiring user interaction. I...

CVE-2017-10396

CVE-2017-10396 affects Oracle Hospitality Cruise AffairWhere (subcomponent AffairWhere) in Oracle Hospitality Applications; affected versions are 2.2.5.0, 2.2.6.0, and 2.2.7.0. The vulnerability allows a low-privileged attacker with logon to the infrastructure where AffairWhere runs to compromise...

Critical Code Execution Flaw Patched in PeopleSoft Core Engine

Organizations that have their PeopleSoft installations exposed to the internet should pay special attention to a remote code execution vulnerability patched on Tuesday as part of Oracle’s massive quarterly Critical Patch Update. The flaw, CVE-2017-10366, allows an attacker to gain remote code...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Simphony Component

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. Oracle Hospitality Simphony is one of the cloud-based mobile food and beverage sales components of the solution, which provides human resource cos...