Unauthenticated Network Access Vulnerability in Oracle Hospitality Applications

CVE-2017-10211

Summary

Vulnerability in the Hospitality Suite8 component of Oracle's Hospitality Applications allows unauthenticated attackers with network access via HTTP to exploit the system. Although the vulnerability primarily resides in Hospitality Suite8, successful attacks could lead to unauthorized updates, insertions, deletions, and reading of critical data. Attackers must entice a user to interact with malicious content, ultimately compromising the integrity of sensitive information and operational functionality.

References