Not rated
CVE-2017-10404 Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications…
Description
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Hospitality Reporting and Analytics | 9.0.0 | No fix stated |
| Hospitality Reporting and Analytics | 8.5.1 | No fix stated |
Other CVEs of Hospitality Reporting and Analytics
The 31 CVEs of Hospitality Reporting and Analytics →
CVE-2023-21828
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications…
8.1
High
CVE-2023-21826
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications…
7.6
High
CVE-2021-2395
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications…
8.1
High
CVE-2021-1997
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications…
8.1
High