Vulnerability in Oracle Hospitality Suite8 Allows Unauthorized Access

CVE-2018-2827

What is CVE-2018-2827?

A vulnerability exists within the Oracle Hospitality Suite8 component of Oracle Hospitality Applications, specifically within the Profile subcomponent. This flaw can be exploited by an attacker with low privileges who has network access via HTTP. While the exploitation requires human interaction from a non-attacker, successful attempts could lead to unauthorized access to sensitive data. This vulnerability may also allow attackers to insert, update, or delete data, as well as potentially cause disruptions such as crashes or denial of service (DOS) conditions for users accessing Oracle Hospitality Suite8.

References