Oracle Hospitality Cruise Materials Management Vulnerability in Oracle Applications

CVE-2017-10401

Summary

A vulnerability exists in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications, specifically in the MMSUpdater subcomponent. This flaw enables a low-privileged attacker with access to the underlying infrastructure to exploit the system. The vulnerability allows for unauthorized actions such as the creation, deletion, or modification of critical data within the Oracle Hospitality Cruise Materials Management system. Additionally, it can grant unauthorized read access to sensitive data and may lead to a denial of service by causing the system to hang or frequently crash. The flaw has far-reaching implications, potentially affecting various other products associated with Oracle Hospitality.

References