The vulnerability of the Simphony Enterprise Server component of the Oracle Hospitality Simphony sales management platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Simphony Enterprise Server component of the Oracle Hospitality Simphony sales management platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Simphony Enterprise Server component of the Oracle Hospitality Simphony sales management platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Simphony Enterprise Server component of the Oracle Hospitality Simphony sales management platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Simphony Enterprise Server component of the Oracle Hospitality Simphony sales management platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Simphony Enterprise Server component of the Oracle Hospitality Simphony sales management platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2024-21010

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: Simphony Enterprise Server. Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2024-20997

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: Simphony Enterprise Server. Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2024-21014

CVE-2024-21014 concerns Oracle Hospitality Simphony, specifically the Simphony Enterprise Server. Technical details in connected docs show: affected versions are 19.1.0 through 19.5.4; root cause is insufficient input validation; attacker needs network access via HTTP and no authentication. Impac...

CVE-2024-21010

Oracle Hospitality Simphony (Simphony Enterprise Server) is affected across versions 19.1.0–19.5.4 due to insufficient input validation. The flaw allows a remote attacker with network access over HTTP and low privileges to execute arbitrary code and potentially take over the Simphony deployment; ...