CVE-2023-21826
First published: Tue Jan 17 2023(Updated: )
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality Reporting and Analytics | =9.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-21826.
What is the affected component of this vulnerability?
The affected component is the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications.
What version is affected by this vulnerability?
The version affected by this vulnerability is 9.1.0.
How severe is this vulnerability?
This vulnerability has a severity score of 7.6 (high severity).
How can an attacker exploit this vulnerability?
An attacker with low privileges and network access via HTTPS can exploit this vulnerability.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/remedy
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle hospitality reporting and analytics
- version/oracle hospitality reporting and analytics/9.1.0