Vulnerability in Oracle Hospitality Cruise Materials Management Allows Unauthenticated Access

CVE-2017-10054

Summary

A vulnerability exists within the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications, specifically in version 7.30.564.0. This flaw enables an unauthenticated attacker with access to the underlying infrastructure to manipulate the Cruise Materials Management system. Exploitation can result in unauthorized modifications—including updates, inserts, or deletions—of critical data, as well as unauthorized read access to sensitive information. This poses significant risks to data confidentiality and integrity within the application.

References