CVE-2017-10216
First published: Tue Aug 08 2017(Updated: )
Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Property Interfaces. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Property Interfaces accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality Suite 8 Property Interfaces | =8.10.0 | |
| Oracle Hospitality Suite 8 Property Interfaces | =8.10.1 | |
| Oracle Hospitality Suite 8 Property Interfaces | =8.10.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10216?
CVE-2017-10216 is classified as a medium severity vulnerability that allows low privileged attackers with network access to compromise affected systems.
How do I fix CVE-2017-10216?
To mitigate CVE-2017-10216, Oracle recommends applying the latest security patch or update provided for affected versions 8.10.0, 8.10.1, and 8.10.2 of the Hospitality Property Interfaces.
What versions of Oracle Hospitality Suite are affected by CVE-2017-10216?
Versions 8.10.0, 8.10.1, and 8.10.2 of the Oracle Hospitality Suite 8 Property Interfaces are affected by CVE-2017-10216.
What type of attack can exploit CVE-2017-10216?
CVE-2017-10216 can be exploited by attackers over HTTP, requiring only low-level permissions and network access.
Is there any specific software component affected by CVE-2017-10216?
The Parser component within the Hospitality Property Interfaces of Oracle Hospitality Applications is specifically affected by CVE-2017-10216.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle hospitality suite 8 property interfaces
- version/oracle hospitality suite 8 property interfaces/8.10.0
- version/oracle hospitality suite 8 property interfaces/8.10.1
- version/oracle hospitality suite 8 property interfaces/8.10.2