CVE-2018-3163

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Cruise Fleet Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Cruise Fleet Management. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0:*:*:*:*:*:*:*

History

21 Nov 2024, 04:05

Type Values Removed Values Added
References () http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - Patch, Vendor Advisory () http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/105626 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/105626 - Third Party Advisory, VDB Entry

Information

Published : 2018-10-17 01:31

Updated : 2024-11-21 04:05


NVD link : CVE-2018-3163

Mitre link : CVE-2018-3163

CVE.ORG link : CVE-2018-3163


JSON object : View

Products Affected

oracle

  • hospitality_cruise_fleet_management