CVE-2017-10168
Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite 8/Windows).
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite 8/Windows). The supported version that is affected is 1.1. Difficult to exploit vulnerability allows physical access to compromise Hospitality Hotel Mobile. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Hotel Mobile accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hospitality Hotel Mobile. CVSS 3.0 Base Score 4.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L).
- CVSS 3.0
- 4.6 MEDIUMCVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L
- EPSS
- 0.38% probability · 31th percentile
- CISA KEV
- Not listed
- Affected
- oracle/hospitality hotel mobile
- Source
- secalert_us@oracle.com
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/99841Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038941Third Party Advisory, VDB Entry
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/99841Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038941Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.