CVE-2017-10205: Medium severity oracle hospitality simphony vulnerability

Published Aug 8, 2017

Updated

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected Software

1 affected component

Oracle Hospitality Simphony=2.9

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Event History

Aug 8, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-10205?

CVE-2017-10205 has a high severity rating due to its potential for exploitation by low privileged attackers.

How do I fix CVE-2017-10205?

To fix CVE-2017-10205, upgrade Oracle Hospitality Simphony to a patched version that addresses the vulnerability.

What components are affected by CVE-2017-10205?

CVE-2017-10205 affects the Oracle Hospitality Simphony component, specifically version 2.9.

Can CVE-2017-10205 be exploited remotely?

Yes, CVE-2017-10205 can be easily exploited remotely via HTTP by an attacker with low privileges.

What impact does CVE-2017-10205 have on Oracle Hospitality Applications?

CVE-2017-10205 could allow unauthorized access and compromise the security of Oracle Hospitality Applications.