CVE-2018-3166 in Hospitality Cruise Fleet Managementthông tin

Tóm tắt

Bởi MITRE

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Cruise Fleet Management accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Đặt trước

15/12/2017

Tiết lộ

16/10/2018

Kiểm duyệt

được chấp nhận

EPSS

0.01207

KEV

không

Các hoạt động

rất thấp

ngành

Hospital

Nguồn

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!