CVE-2017-10425

CVE-2017-10425 affects Oracle Hospitality Simphony’s Service Host subcomponent in versions 2.6–2.9. The vulnerability enables a low-privileged attacker with network access over HTTP to modify and read Oracle Hospitality Simphony data (update/insert/delete and read access). The CVSS base score is ...