CVE Feed

    Dashboard / CVE / CVE-2017-10419

    CVE-2017-10419

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Suite8 executes to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Suite8 accessible data as well as unauthorized read access to a subset of Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

    Published:Oct 19, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 19, 2017
    EPSS Score:0.00102
    CVSS Score:5.1

    Affected Products

    Vendor
    Oracle
    Product
    Hospitality Suite8

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-45105 (CVSS 5.9) — Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolle…
    CVE-2021-41184 (CVSS 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `…
    CVE-2021-41182 (CVSS 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `…
    CVE-2021-41183 (CVSS 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of vario…
    CVE-2021-2351 (CVSS 8.3) — Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that a…
    CVE-2020-14810 (CVSS 5.4) — Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications (component: WebConne…
    CVE-2019-10219 (CVSS 6.1) — A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize…
    CVE-2019-2781 (CVSS 6.5) — Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: XML…
    CVE-2018-2827 (CVSS 7.6) — Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Pro…
    CVE-2017-10316 (CVSS 6.5) — Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Web…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High