141 matches found
CVE-2017-10316
CVE-2017-10316 affects Oracle Hospitality Suite8 (WebConnect) within Oracle Hospitality Applications. Affected versions are 8.10.1 and 8.10.2. The issue enables a low-privilege attacker with network access over HTTP to compromise Suite8 and may lead to unauthorized access to critical data or full...
CVE-2017-10337
CVE-2017-10337 affects the Oracle Hospitality Suite8 (Oracle Hospitality Applications, Leisure subcomponent). Affected versions: 8.10.1 and 8.10.2. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, enabling unauthorized read access to a subset of data and...
CVE-2017-10318
CVE-2017-10318 affects Oracle Hospitality Suite8 WebConnect (Oracle Hospitality Applications) in versions 8.10.1 and 8.10.2. Reported as an unauthenticated vulnerability reachable over HTTP with network access, where successful attacks may lead to unauthorized read access to a subset of data; att...
CVE-2017-10337
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10318
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10317
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...
CVE-2017-10420
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10339
CVE-2017-10339 affects Oracle Hospitality Suite8 (WebConnect) with affected versions 8.10.1 and 8.10.2. The vulnerability can be exploited by an unauthenticated attacker over HTTP to access Oracle Hospitality Suite8 data. The CVSS 3.0 base score is 5.9 (Confidentiality impact: High, others: none)...
CVE-2017-10421
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10419
CVE-2017-10419 affects Oracle Hospitality Suite8 (PMS component). Affected versions: 8.10.1 and 8.10.2. The vulnerability is exploitable by an unauthenticated attacker with logon to the infrastructure where Suite8 runs, enabling unauthorized update/insert/delete and read access to a subset of dat...
CVE-2017-10419
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality...
CVE-2017-10014
CVE-2017-10014 affects the Oracle Hospitality Hotel Mobile component (Suite8/RESTAPI), version 1.1. The vulnerability arises in Oracle Hospitality Applications, allowing a low-privilege attacker with network access via HTTP to potentially modify data, with the attack requiring user interaction. I...
CVE-2017-10389: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Suit...
CVE-2017-10339: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10318: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10050: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10421: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10420: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10419: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality...
CVE-2017-10337: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...