Skip to content
Sign in
Not rated

CVE-2018-2853 Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications…

Description

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Client Application Loader). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony First Edition accessible data as well as unauthorized read access to a subset of Oracle Hospitality Simphony First Edition accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

Affected products and versions

Product Affected versions Fixed in
Hospitality Simphony First Edition 1.7 No fix stated
Hospitality Simphony First Edition 1.6 No fix stated

Other CVEs of Hospitality Simphony First Edition

The 5 CVEs of Hospitality Simphony First Edition →
CVE-2018-2847 Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications… Not rated CVE-2018-2848 Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications… Not rated CVE-2018-2851 Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications… Not rated CVE-2017-10001 Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications… Not rated
Track this CVE