First published: Tue Aug 08 2017(Updated: )
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Export Functionality). Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Hospitality OPERA | =5.4.0 | |
Oracle Hospitality OPERA | =5.4.1 | |
Oracle Hospitality OPERA | =5.4.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-10182 is classified as a difficult-to-exploit vulnerability that can be targeted by high-privileged attackers.
To fix CVE-2017-10182, you should update the affected Oracle Hospitality OPERA software to a patched version.
CVE-2017-10182 affects Oracle Hospitality OPERA versions 5.4.0.x, 5.4.1.x, and 5.4.3.x.
CVE-2017-10182 involves the OPERA Export Functionality component of Oracle Hospitality OPERA.
CVE-2017-10182 requires a high privileged attacker to exploit, which makes remote exploitation challenging.