Buffer overflow

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Client Application Loader. Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Buffer overflow

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Operations. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Buffer overflow

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

Design/Logic Flaw

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2018-2851

The CVE-2018-2851 vulnerability affects Oracle Hospitality Simphony First Edition, specifically the Enterprise Management Console subcomponent, in versions 1.6 and 1.7. The issue allows a low-privileged attacker with network access via HTTP to compromise data, enabling unauthorized creation, dele...

CVE-2018-2848

CVE-2018-2848 affects Oracle Hospitality Simphony First Edition, specifically the Client Application Loader. Vulnerable versions are 1.6 and 1.7. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, potentially resulting in unauthorized access to crit...

CVE-2018-2853

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Operations, Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network acces...

CVE-2018-2853

CVE-2018-2853 affects the Oracle Hospitality Simphony First Edition platform, specifically the Operations, Client Application Loader subcomponent. Affected versions are 1.6 and 1.7. The issue is exploitable by a low-privilege attacker over the network via HTTP, enabling unauthorized updates, inse...

CVE-2018-2829

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2802

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Client Application Loader. Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2802

CVE-2018-2802 affects Oracle Hospitality Simphony’s Client Application Loader. The vulnerability exists in supported versions 2.8 and 2.9 and can be exploited by a low-privilege attacker with network access via HTTP, leading to unauthorized update/insert/delete and read access to Oracle Hospitali...

CVE-2018-2829

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2847

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Operations. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2833

The CVE-2018-2833 entry concerns Oracle Hospitality Simphony, specifically the Enterprise Management Console subcomponent, affecting versions 2.7–2.10. The vulnerability is exploitable over HTTP from a low-privilege network-access attacker and can lead to unauthorized creation, deletion, or modif...

CVE-2018-2848

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2018-2829

CVE-2018-2829 affects Oracle Hospitality Simphony Enterprise Management Console (2.10) as part of Oracle Hospitality Applications. The vulnerability allows unauthenticated, network-based access via HTTP to compromise confidentiality, integrity, and availability, enabling unauthorized read/write/d...

CVE-2018-2853

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Operations, Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network acces...

CVE-2018-2847

CVE-2018-2847 affects Oracle Hospitality Simphony First Edition, Operations subcomponent, with affected versions 1.6 and 1.7. A connected document (PRION/CVE-2018-2847) indicates a buffer overflow as the underlying issue, allowing a low-privilege attacker with network access via HTTP to compromis...