Security Vulnerability in Oracle Hospitality e7 Component by Oracle
CVE-2017-10200

4.4MEDIUM

Key Information:

Vendor
Oracle
Status
Hospitality E7
Vendor
CVE Published:
8 August 2017

Summary

A vulnerability exists within the Oracle Hospitality e7 component that allows low privileged users with logon access to exploit the system. This can lead to unauthorized updates, inserts, or deletions of accessible data. Additionally, attackers can gain unauthorized read access to certain subsets of data within Oracle Hospitality e7, which poses significant risks to sensitive information integrity and confidentiality.

Affected Version(s)

Hospitality e7 4.2.1

References

http://www.securityfocus.com/bid/99858
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1038941
vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.