CVE-2017-10402
CriticalSummary
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications allows an unauthenticated attacker with network access via HTTP to take control of the system. Affects versions 8.5.1 and 9.0.0.
Risk Assessment
An attacker can remotely compromise Oracle Hospitality Reporting and Analytics, which may significantly impact other products within the Oracle Hospitality ecosystem.
Recommendation
It is recommended to update to the latest software version and implement appropriate security measures to restrict access to the system.
Other vulnerabilities in Oracle Hospitality Reporting and Analytics
See all- CVE-2017-10000High
A vulnerability in the Oracle Hospitality Reporting and Analytics component allows a low privileged attacker with network access via HTTP to compromise the system. The attack can lead to hangs or frequent crashes, resulting in a complete denial of service.
- CVE-2017-10405Critical
A vulnerability in the Oracle Hospitality Reporting and Analytics component allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and cause the system to crash.
Original NVD description (English source)
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).