Vulnerability in Oracle Hospitality Applications Reporting and Analytics Component

CVE-2017-10403

Summary

A vulnerability exists in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications. It affects versions 8.5.1 and 9.0.0, allowing a low privileged attacker with network access via HTTP to exploit the system. Successful exploitation of this vulnerability requires human interaction from a third party, potentially leading to unauthorized control of the affected application. While specific to Reporting and Analytics, the impact could extend to other components, raising significant security concerns regarding data confidentiality, integrity, and overall system availability. The vulnerability primarily arises from improper input validation, thus necessitating prompt attention and remediation to prevent possible compromise.

References