Vulnerability in Oracle Hospitality Suites Management by Oracle
CVE-2020-2697

4.9MEDIUM

Key Information:

Vendor
Oracle
Status
Hospitality Suites Management
Vendor
CVE Published:
15 January 2020

Summary

The Oracle Hospitality Suites Management component within Oracle Food and Beverage Applications contains a vulnerability that could be easily exploited by individuals with physical access. This flaw may allow attackers to gain unauthorized access to sensitive data, resulting in the potential for data breaches or manipulation. Specifically, successful exploitation of this vulnerability can lead to unauthorized updates, insertions, or deletions of data stored in the Oracle Hospitality Suites Management system.

Affected Version(s)

Hospitality Suites Management 3.7

Hospitality Suites Management 3.8

References

https://www.oracle.com/security-alerts/cpujan2020.html
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.