First published: Tue Jul 23 2019(Updated: )
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: XML Interface). Supported versions that are affected are 8.9.6, 8.10.2 and 8.11-8.14. Easily exploitable vulnerability allows low privileged attacker with network access via TCP/IP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Hospitality Suite8 | >=8.11<=8.14 | |
Oracle Hospitality Suite8 | =8.9.6 | |
Oracle Hospitality Suite8 | =8.10.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2019-2781.
The severity rating of CVE-2019-2781 is medium (6.5).
Versions 8.9.6, 8.10.2, and 8.11-8.14 are affected by CVE-2019-2781.
This vulnerability allows a low privileged attacker with network access via TCP/IP to compromise the Oracle Hospitality Suite8 component.
You can find more information about CVE-2019-2781 on the Oracle website at this URL: http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html