CVE-2026-60169 in Hospitality Simphonythông tin

Tóm tắt

Bởi MITRE • 22/07/2026

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Simphony. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

chịu trách nhiệm

Oracle

Đặt trước

08/07/2026

Tiết lộ

22/07/2026

Kiểm duyệt

được chấp nhận

EPSS

0.00348

KEV

không

Các hoạt động

rất thấp

ngành

Hospital

Nguồn

Want to know what is going to be exploited?

We predict KEV entries!