CVE-2017-10402

Critical

Published: 19/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications allows an unauthenticated attacker with network access via HTTP to take control of the system. Affects versions 8.5.1 and 9.0.0.

Risk Assessment

An attacker can remotely compromise Oracle Hospitality Reporting and Analytics, which may significantly impact other products within the Oracle Hospitality ecosystem.

Recommendation

It is recommended to update to the latest software version and implement appropriate security measures to restrict access to the system.

Original NVD description (English source)

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).