Unauthenticated Access Vulnerability in Oracle Hospitality Reporting and Analytics
CVE-2018-2669
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 18 January 2018
What is CVE-2018-2669?
This vulnerability exists in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications, impacting versions 8.5.1 and 9.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Exploiting this vulnerability necessitates human interaction from a third party, which heightens the risk as attacks could lead to unauthorized read, update, insert, or delete operations on accessible data. The implication of attacks may extend to other Oracle Hospitality products, posing significant risks to data integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Hospitality Reporting and Analytics 8.5.1
Hospitality Reporting and Analytics 9.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved