Exploitable Vulnerability in Oracle Hospitality Reporting and Analytics by Oracle
CVE-2023-21826
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 18 January 2023
What is CVE-2023-21826?
A vulnerability in Oracle Hospitality Reporting and Analytics allows low-privileged attackers with network access via HTTPS to potentially compromise the system. Successful exploitation can lead to unauthorized access to sensitive data, providing attackers with the ability to update, insert, or delete accessible data. This vulnerability also enables attackers to trigger denial of service conditions, causing the application to crash or hang. Note that user interaction is required from a third party, making it crucial for users to remain vigilant.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Hospitality Reporting and Analytics 9.1.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved