Authentication Bypass in Oracle Hospitality Reporting and Analytics
CVE-2018-2650
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 18 January 2018
What is CVE-2018-2650?
A vulnerability exists in the Oracle Hospitality Reporting and Analytics component, which might allow a low-privileged attacker with network access via HTTP to compromise the system. This exploitable weakness can lead to unauthorized actions, including creation, deletion, or modification of critical data within the Oracle Hospitality Reporting and Analytics environment. Additionally, it may permit unauthorized read access to specific datasets, exposing sensitive information linked to the reporting and analytics capabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Hospitality Reporting and Analytics 8.5.1
Hospitality Reporting and Analytics 9.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved