Vulnerability in Oracle Hospitality Cruise Fleet Management by Oracle

CVE-2017-10395

What is CVE-2017-10395?

A vulnerability exists in the Oracle Hospitality Cruise Fleet Management component that could be exploited by a low-privileged attacker with network access via HTTP. This vulnerability allows attackers to make unauthorized updates, inserts, or deletions to accessible data, as well as gaining unauthorized read access to certain data within the system. The vulnerability primarily affects version 9.0.2.0 of the product, underscoring the need for prompt attention to security protocols.

References