CVE-2019-2781
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: XML Interface). Supported versions that are affected are 8.9.6, 8.10.2 and 8.11-8.14. Easily exploitable vulnerability allows low privileged attacker with network access via TCP/IP to compromise Oracle Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Suite8 accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Una vulnerabilidad en el componente Oracle Hospitality Suite8 de Hospitality Applications Oracle (subcomponente: Interface XML). Las versiones compatibles que están afectadas son 8.9.6, 8.10.2 y 8.11 hasta 8.14. Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de TCP/IP comprometer a Oracle Hospitality Suite8. Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Hospitality Suite8. CVSS 3.0 Puntuación Base 6.5 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2018-12-14 CVE Reserved
- 2019-07-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-10-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html | 2020-08-24 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Oracle Search vendor "Oracle" | Hospitality Suite8 Search vendor "Oracle" for product "Hospitality Suite8" | >= 8.11 <= 8.14 Search vendor "Oracle" for product "Hospitality Suite8" and version " >= 8.11 <= 8.14" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Hospitality Suite8 Search vendor "Oracle" for product "Hospitality Suite8" | 8.9.6 Search vendor "Oracle" for product "Hospitality Suite8" and version "8.9.6" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Hospitality Suite8 Search vendor "Oracle" for product "Hospitality Suite8" | 8.10.2 Search vendor "Oracle" for product "Hospitality Suite8" and version "8.10.2" | - |
Affected
|