Unauthenticated Network Vulnerability in Oracle Hospitality Reporting and Analytics
CVE-2017-10405

10CRITICAL

Key Information:

Vendor

Oracle
Status
Hospitality Reporting And Analytics
Vendor
CVE Published:
19 October 2017

What is CVE-2017-10405?

A network vulnerability in Oracle Hospitality Reporting and Analytics allows unauthenticated attackers to exploit the system remotely via HTTP. Attackers can gain unauthorized access to critical data and potentially compromise the integrity and availability of the application. This issue affects versions 8.5.1 and 9.0.0, with successful exploitation leading to complete access to sensitive data and the ability to cause disruptions such as system crashes or service outages, impacting overall operational efficiency.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Hospitality Reporting and Analytics 8.5.1

Hospitality Reporting and Analytics 9.0.0

References

http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/101394
vdb-entryx_refsource_BID

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.