Vulnerability in Oracle Hospitality Cruise Fleet Management

CVE-2017-10398

What is CVE-2017-10398?

This vulnerability resides in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications and can be exploited by a low-privileged attacker who has logged onto the infrastructure. This flaw allows for unauthorized creation, deletion, or modification of critical data within the Oracle Hospitality Cruise Fleet Management system. While it primarily affects this specific component, successful exploitation may also impact additional products connected to the infrastructure. The consequences of such an attack can lead to significant breaches of confidentiality and integrity, compromising all data accessible through the system.

References