Vulnerability in Oracle Hospitality Cruise Fleet Management
CVE-2017-10398

8.4HIGH

Key Information:

Vendor
Oracle
Vendor
CVE Published:
19 October 2017

Summary

This vulnerability resides in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications and can be exploited by a low-privileged attacker who has logged onto the infrastructure. This flaw allows for unauthorized creation, deletion, or modification of critical data within the Oracle Hospitality Cruise Fleet Management system. While it primarily affects this specific component, successful exploitation may also impact additional products connected to the infrastructure. The consequences of such an attack can lead to significant breaches of confidentiality and integrity, compromising all data accessible through the system.

Affected Version(s)

Hospitality Cruise Fleet Management 9.0.2.0

References

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.