CVE-2017-10226

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Fleet Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0:*:*:*:*:*:*:*

History

21 Nov 2024, 03:05

Type Values Removed Values Added
References () http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - Patch, Vendor Advisory () http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/99646 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/99646 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1038941 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1038941 - Third Party Advisory, VDB Entry

Information

Published : 2017-08-08 15:29

Updated : 2024-11-21 03:05


NVD link : CVE-2017-10226

Mitre link : CVE-2017-10226

CVE.ORG link : CVE-2017-10226


JSON object : View

Products Affected

oracle

  • hospitality_cruise_fleet_management