CVE-2017-10207: Medium severity oracle hospitality simphony vulnerability

Published Aug 8, 2017

Updated

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Utilities). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Simphony. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected Software

1 affected component

Oracle Hospitality Simphony=2.9

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Event History

Aug 8, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-10207?

CVE-2017-10207 is classified as a high severity vulnerability due to its potential for easy exploitation.

What systems are affected by CVE-2017-10207?

CVE-2017-10207 affects Oracle Hospitality Simphony version 2.9.

How can I fix CVE-2017-10207?

To fix CVE-2017-10207, upgrade Oracle Hospitality Simphony to a patched version as recommended by Oracle.

Can CVE-2017-10207 be exploited remotely?

Yes, CVE-2017-10207 can be exploited remotely by an unauthenticated attacker with network access via HTTP.

What type of access is required for CVE-2017-10207 exploitation?

An unauthenticated attacker can exploit CVE-2017-10207 with network access, requiring no authentication.