Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Export Functionality). Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
References
| Link | Resource |
|---|---|
| http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/99725 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038941 | Third Party Advisory VDB Entry |
| http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/99725 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038941 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - Patch, Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/99725 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1038941 - Third Party Advisory, VDB Entry |
Information
Published : 2017-08-08 15:29
Updated : 2024-11-21 03:05
NVD link : CVE-2017-10182
Mitre link : CVE-2017-10182
CVE.ORG link : CVE-2017-10182
JSON object : View
Products Affected
oracle
- hospitality_opera_5_property_services
CWE