WebConnect Vulnerability in Oracle Hospitality Suite8

CVE-2020-14810

Summary

An unauthenticated network access vulnerability exists in Oracle Hospitality Suite8's WebConnect component. Exploitation requires human interaction from a third party, allowing attackers to gain unauthorized update, insert, or delete access to data. This susceptibility could also enable unauthorized read access to certain data within the application, leading to significant data integrity and confidentiality concerns. It is essential to address this vulnerability to safeguard your Oracle Hospitality Suite8 environment.

References