Vulnerability in Oracle Hospitality Simphony First Edition Component

CVE-2018-2851

What is CVE-2018-2851?

A vulnerability exists in the Oracle Hospitality Simphony First Edition, specifically within its Enterprise Management Console. This flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation could lead to unauthorized actions such as the creation, deletion, or modification of critical data. Attackers may gain complete access to all data accessible via the Oracle Hospitality Simphony First Edition, making it imperative for organizations using affected versions 1.6 and 1.7 to implement necessary security measures.

References