CVE-2024-20989: High severity oracle hospitality simphony vulnerability
Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS). Supported versions that are affected are 19.1.0-19.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Simphony. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20989?
CVE-2024-20989 is classified as a difficult to exploit vulnerability that affects Oracle Hospitality Simphony.
How do I fix CVE-2024-20989?
To remediate CVE-2024-20989, update your Oracle Hospitality Simphony software to a version beyond 19.5.4.
Who is affected by CVE-2024-20989?
CVE-2024-20989 affects all versions of Oracle Hospitality Simphony software from 19.1.0 to 19.5.4.
Can CVE-2024-20989 be exploited remotely?
Yes, CVE-2024-20989 can be exploited by an unauthenticated attacker with network access via HTTP.
What component is impacted by CVE-2024-20989?
CVE-2024-20989 impacts the Simphony POS component of the Oracle Hospitality product.