CVE-2018-2847: Medium severity oracle hospitality simphony vulnerability

Published Apr 19, 2018

Updated

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony First Edition accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected Software

2 affected components

Oracle Hospitality Simphony=1.6

Oracle Hospitality Simphony=1.7

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Event History

Apr 19, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-2847?

CVE-2018-2847 is a vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations).

What versions of Oracle Hospitality Simphony are affected?

Versions 1.6 and 1.7 of Oracle Hospitality Simphony are affected by CVE-2018-2847.

How severe is CVE-2018-2847?

CVE-2018-2847 has a severity value of 6.5, which is considered medium.

How can an attacker exploit CVE-2018-2847?

An attacker with network access via HTTP can exploit CVE-2018-2847.

Where can I find more information about CVE-2018-2847?

You can find more information about CVE-2018-2847 at the following references: http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html, http://www.securityfocus.com/bid/103904