CVE-2017-10000 — Improper Privilege Management in Corporation Hospitality Reporting AND Analytics

CWE-269 — Improper Privilege Management7 documents5 sources
Severity
7.7HIGHNVD
EPSS
0.4%
top 41.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Hospitality Reporting AND AnalyticsOracle Hospitality Reporting AND Analytics
Timeline
PublishedAug 8
Latest updateMay 13

Description

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this …

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 3.1 | Impact: 4.0

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2746-64v7-wvw8: Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting)↗2022-05-13
▶
CVEList
CVE-2017-10000: Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting)↗2017-08-08
▶

💥Exploits & PoCs

3
Exploit-DB
Responsive Realestate Script 3.2 - 'property-list?tbud' SQL Injection↗2017-12-11
▶
Exploit-DB
Mozilla Firefox < 55 - Denial of Service↗2017-10-20
▶
Exploit-DB
Zookeeper 3.5.2 Client - Denial of Service↗2017-07-02
▶

💬Community

1
HackerOne
Remote OS command Execution in the 3 more Oracle Weblogic on the ████████, ████, ███████ [CVE-2017-10352]↗2019-10-08
▶
CVE-2017-10000 — Improper Privilege Management | cvebase