CVE-2017-10000
HighSummary
A vulnerability in the Oracle Hospitality Reporting and Analytics component allows a low privileged attacker with network access via HTTP to compromise the system. The attack can lead to hangs or frequent crashes, resulting in a complete denial of service.
Risk Assessment
Exploitation of this vulnerability may significantly impact the availability of Oracle Hospitality Reporting and Analytics and other related products, potentially leading to operational downtime.
Recommendation
It is recommended to update to the latest version of Oracle Hospitality software to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Oracle Hospitality Reporting and Analytics
See all- CVE-2017-10405Critical
A vulnerability in the Oracle Hospitality Reporting and Analytics component allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and cause the system to crash.
- CVE-2017-10402Critical
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications allows an unauthenticated attacker with network access via HTTP to take control of the system. Affects versions 8.5.1 and 9.0.0.
Original NVD description (English source)
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).