CVE-2024-20997

published 2024-04-16

CVE-2024-20997: Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions…

Priority P2 61 critical 9.9 CVSS 3.1

AV N AC L PR L UI N S C C H I H A H

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. While the vulnerability is in Oracle Hospitality Simphony, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Simphony. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
oracle	hospitality_simphony	19.1.0 – 19.5.4	—
oracle_corporation	hospitality_simphony	19.1.0 – 19.5.4	—

Detection & IOCs extracted from sources · hover to see the quote

• → Vulnerability is exploitable over HTTP by a low-privileged network attacker against Oracle Hospitality Simphony Enterprise Server versions 19.1.0 through 19.5.4; monitor for anomalous authenticated HTTP requests targeting Simphony Enterprise Server endpoints ↗
• → Successful exploitation results in full takeover of Oracle Hospitality Simphony with scope change impacting additional products; alert on unexpected privilege escalation or lateral movement originating from Simphony Enterprise Server hosts ↗
• → Scope change is confirmed (S:C in CVSS vector), meaning exploitation can impact systems beyond the vulnerable component; monitor adjacent systems and services connected to Simphony Enterprise Server for signs of compromise ↗

• · Affected versions are narrowly scoped to Oracle Hospitality Simphony 19.1.0 through 19.5.4; versions outside this range are not listed as affected ↗
• · The vulnerable component is specifically the Simphony Enterprise Server sub-component; detection and patching efforts should be focused on that component rather than the broader Simphony suite ↗

CVSS provenance

nvd v3.1 9.9 CRITICAL CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vendor_oracle 9.9 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.