Vulnerability in Oracle Hospitality Cruise Materials Management Software

CVE-2017-10229

Summary

The vulnerability in Oracle Hospitality Cruise Materials Management’s Event Viewer component allows a low-privileged attacker with network access through HTTP to manipulate the system. A successful exploit could lead to unauthorized updates, insertions, or deletions of data, as well as unauthorized read access to specific data subsets. This flaw exposes sensitive data and poses a significant risk to the integrity and confidentiality of the information managed by the application.

References