118 matches found
CVE-2017-10316
CVE-2017-10316 affects Oracle Hospitality Suite8 (WebConnect) within Oracle Hospitality Applications. Affected versions are 8.10.1 and 8.10.2. The issue enables a low-privilege attacker with network access over HTTP to compromise Suite8 and may lead to unauthorized access to critical data or full...
CVE-2017-10318
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10319
CVE-2017-10319 affects the Oracle Hospitality Suite8 (Leisure) component. Affected versions are 8.10.1 and 8.10.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of Oracle Hospitality Suite8 data. Underlying impact: confidentiality loss for acce...
CVE-2017-10421
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10389
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Suit...
CVE-2017-10339
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10421
CVE-2017-10421 affects the Oracle Hospitality Suite8 Leisure component. Affected versions are 8.10.1 and 8.10.2. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, potentially leading to unauthorized access to critical data or complete access to all Oracle...
CVE-2017-10316
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10014
CVE-2017-10014 affects the Oracle Hospitality Hotel Mobile component (Suite8/RESTAPI), version 1.1. The vulnerability arises in Oracle Hospitality Applications, allowing a low-privilege attacker with network access via HTTP to potentially modify data, with the attack requiring user interaction. I...
CVE-2017-10050
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10318
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10319
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10318
CVE-2017-10318 affects Oracle Hospitality Suite8 WebConnect (Oracle Hospitality Applications) in versions 8.10.1 and 8.10.2. Reported as an unauthenticated vulnerability reachable over HTTP with network access, where successful attacks may lead to unauthorized read access to a subset of data; att...
CVE-2017-10419
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality...
CVE-2017-10050
Oracle Hospitality Suite8 (WebConnect) is affected in 8.10.1 and 8.10.2. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Suite8, with user interaction required, potentially gaining unauthorized access to data and performing unauthorized updates/del...
CVE-2017-10419
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality...
CVE-2017-10420
Vulnerability CVE-2017-10420 affects Oracle Hospitality Suite8 (Leisure subcomponent). Affected versions are 8.10.1 and 8.10.2. The issue enables a low-privileged, network-accessible attacker (via HTTP) to compromise Suite8, potentially allowing unauthorized updates/deletes to data and a partial ...
CVE-2017-10419
CVE-2017-10419 affects Oracle Hospitality Suite8 (PMS component). Affected versions: 8.10.1 and 8.10.2. The vulnerability is exploitable by an unauthenticated attacker with logon to the infrastructure where Suite8 runs, enabling unauthorized update/insert/delete and read access to a subset of dat...
CVE-2017-10337
CVE-2017-10337 affects the Oracle Hospitality Suite8 (Oracle Hospitality Applications, Leisure subcomponent). Affected versions: 8.10.1 and 8.10.2. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, enabling unauthorized read access to a subset of data and...
CVE-2017-10389
CVE-2017-10389 affects Oracle Hospitality Suite8 PMS (Oracle Hospitality Applications), specifically versions 8.10.1 and 8.10.2. The vulnerability resides in the Suite8 component and can be exploited by a low-privileged user who can log in, with exploitation requiring user interaction. Consequenc...