CVE-2017-10361
First published: Thu Oct 19 2017(Updated: )
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. While the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Cruise Shipboard Property Management System. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality Cruise Shipboard Property Management System | =8.0.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10361?
CVE-2017-10361 has a CVSS score that indicates it is an easily exploitable vulnerability, making it a high-priority issue for affected users.
How do I fix CVE-2017-10361?
To fix CVE-2017-10361, you should upgrade to a patched version of the Oracle Hospitality Cruise Shipboard Property Management System as specified in Oracle's security advisory.
Who is affected by CVE-2017-10361?
CVE-2017-10361 affects users of Oracle Hospitality Cruise Shipboard Property Management System version 8.0.2.0.
What type of vulnerability is CVE-2017-10361?
CVE-2017-10361 is a network access vulnerability that can be exploited by low privileged attackers via HTTP.
Is CVE-2017-10361 part of a security advisory?
Yes, CVE-2017-10361 is addressed in Oracle's October 2017 Critical Patch Update security advisory.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- agent/source
- vendor/oracle
- canonical/oracle hospitality cruise shipboard property management system
- version/oracle hospitality cruise shipboard property management system/8.0.2.0