Unauthenticated Network Access Vulnerability in Oracle Hospitality Applications
CVE-2017-10211

6.1MEDIUM

Key Information:

Vendor

Oracle
Status
Hospitality Suite8
Vendor
CVE Published:
8 August 2017

What is CVE-2017-10211?

Vulnerability in the Hospitality Suite8 component of Oracle's Hospitality Applications allows unauthenticated attackers with network access via HTTP to exploit the system. Although the vulnerability primarily resides in Hospitality Suite8, successful attacks could lead to unauthorized updates, insertions, deletions, and reading of critical data. Attackers must entice a user to interact with malicious content, ultimately compromising the integrity of sensitive information and operational functionality.

Affected Version(s)

Hospitality Suite8 8.10.x

References

http://www.securitytracker.com/id/1038941
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/99671
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-10211 : Unauthenticated Network Access Vulnerability in Oracle Hospitality Applications