Buffer overflow

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: POS. Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitalit...

Buffer overflow

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Security. The supported version that is affected is 2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2018-2589

CVE-2018-2589 affects the Oracle Hospitality Simphony Enterprise Server component, impacting versions 2.7, 2.8 and 2.9. An unauthenticated attacker with network access over HTTP can compromise confidentiality and potentially access all Oracle Hospitality Simphony data. The CVSSv3 base score is 7....

CVE-2018-2608

The CVE-2018-2608 advisory concerns Oracle Hospitality Simphony (Oracle Hospitality Applications, subcomponent: Security). Affected: Simphony version 2.7. Root cause details are not provided in the connected documents, but the vulnerability is described as easily exploitable: an unauthenticated a...

CVE-2018-2636

CVE-2018-2636 affects Oracle Hospitality Simphony (MICROS) versions 2.7, 2.8 and 2.9. The vulnerability is described as a directory traversal / missing authentication issue in the Security component that can be exploited remotely over HTTP by an unauthenticated attacker to read sensitive files an...

CVE-2018-2672

CVE-2018-2672 concerns Oracle Hospitality Simphony (POS) with affected versions 2.7–2.9. The vulnerability enables an unauthenticated attacker who can reach the system over HTTP to access data, per the NVD description. The CVSS3 base score is 7.5 (High) with high confidentiality impact and no int...

CVE-2018-2673

CVE-2018-2673 affects the Oracle Hospitality Simphony component (POS) and is listed against Oracle Hospitality Applications. Affected versions are 2.7, 2.8, and 2.9. The vulnerability is described as difficult to exploit but allows an unauthenticated attacker with network access via HTTP to compr...

CVE-2018-2673

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: POS. Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2636

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Security. Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2608

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Security. The supported version that is affected is 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2018-2672

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: POS. Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitalit...

CVE-2018-2683

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: POS. Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitalit...

CVE-2018-2589

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Server. Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2608

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Security. The supported version that is affected is 2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2018-2636

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Security. Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2672

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: POS. Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitalit...

CVE-2018-2683

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: POS. Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitalit...

CVE-2018-2673

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: POS. Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2683

Mode C: The connected Prion doc explicitly labels CVE-2018-2683 as a Buffer overflow vulnerability in Oracle Hospitality Simphony (POS subcomponent). Affected versions listed are 2.7, 2.8, and 2.9. The vulnerability is described as allowing an unauthenticated attacker with network access via HTTP...

CVE-2018-2619

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Security. The supported version that is affected is 2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality...