First published: Wed Oct 17 2018(Updated: )
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC ENOAD). The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Hospitality Cruise Shipboard Property Management System | =8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2018-3181 is medium.
The affected software component of CVE-2018-3181 is Oracle Hospitality Cruise Shipboard Property Management System version 8.0.
A low privileged attacker can exploit CVE-2018-3181 if they have logon access to the infrastructure.
The references for CVE-2018-3181 are: [Oracle Security Advisory](http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html), [SecurityFocus](http://www.securityfocus.com/bid/105632).