Vulnerability in Oracle Hospitality Applications' Cloud Service Components

CVE-2017-10064

What is CVE-2017-10064?

A vulnerability exists in Oracle's Hospitality WebSuite8 Cloud Service, allowing unauthenticated attackers with network access via HTTP to potentially compromise sensitive data. This vulnerability affects versions 8.9.6 and 8.10.x, permitting unauthorized users to gain access to modify, delete, or retrieve data after human interaction from an unconnected user. The attacks could not only compromise the Hospitality WebSuite8 Cloud Service but also impact other connected products, leading to possible data integrity and confidentiality breaches.

References