CVE-2017-10405
CriticalSummary
A vulnerability in the Oracle Hospitality Reporting and Analytics component allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and cause the system to crash.
Risk Assessment
The risk to the organization includes the potential for unauthorized access to sensitive data and possible disruptions to system operations, which could lead to downtime.
Recommendation
It is recommended to update to the latest version of Oracle Hospitality software to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Oracle Hospitality Reporting and Analytics
See all- CVE-2017-10000High
A vulnerability in the Oracle Hospitality Reporting and Analytics component allows a low privileged attacker with network access via HTTP to compromise the system. The attack can lead to hangs or frequent crashes, resulting in a complete denial of service.
- CVE-2017-10402Critical
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications allows an unauthenticated attacker with network access via HTTP to take control of the system. Affects versions 8.5.1 and 9.0.0.
Original NVD description (English source)
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).