First published: Tue Aug 08 2017(Updated: )
Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: Event Viewer). The supported version that is affected is 7.30.562. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Materials Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Materials Management accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Materials Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Hospitality Cruise | =7.30.562 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-10229 is categorized as a high severity vulnerability due to its potential for exploitation by low privileged attackers.
To mitigate CVE-2017-10229, it is recommended to upgrade to the latest version of Oracle Hospitality Cruise Materials Management beyond 7.30.562.
CVE-2017-10229 affects users of Oracle Hospitality Cruise Materials Management version 7.30.562.
CVE-2017-10229 can be exploited remotely over HTTP by attackers with low privileges.
CVE-2017-10229 affects the Event Viewer component within the Oracle Hospitality Cruise Materials Management application.