CVE-2018-3160
First published: Wed Oct 17 2018(Updated: )
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC Admin, OHC Management). The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Cruise Shipboard Property Management System. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality Cruise Shipboard Property Management System | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this Oracle Hospitality Cruise Shipboard Property Management System vulnerability?
The vulnerability ID is CVE-2018-3160.
What is the affected software?
The affected software is the Oracle Hospitality Cruise Shipboard Property Management System version 8.0.
What is the severity of CVE-2018-3160?
The severity of CVE-2018-3160 is high with a CVSS score of 7.7.
How can the vulnerability be exploited?
The vulnerability can be easily exploited by a high privileged attacker with logon credentials.
How do I fix CVE-2018-3160?
To fix CVE-2018-3160, it is recommended to apply the necessary patches provided by Oracle.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/author
- agent/severity
- agent/remedy
- agent/tags
- agent/event
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle hospitality cruise shipboard property management system
- version/oracle hospitality cruise shipboard property management system/8.0