Vulnerability in Oracle Hospitality Cruise Shipboard Property Management System
CVE-2018-3181

5.5MEDIUM

Key Information:

Vendor

Oracle
Status
Hospitality Cruise Shipboard Property Management System
Vendor
CVE Published:
17 October 2018

What is CVE-2018-3181?

The Oracle Hospitality Cruise Shipboard Property Management System contains a vulnerability that can be exploited by a low privileged attacker who is logged into the network where the system operates. This flaw grants the attacker the ability to access sensitive information and potentially gain complete control over the data managed by this system. As such, it raises significant concerns regarding the confidentiality of critical data stored within the Oracle Hospitality ecosystem.

Affected Version(s)

Hospitality Cruise Shipboard Property Management System 8.0

References

http://www.securityfocus.com/bid/105632
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.