Oracle Hospitality Simphony vulnerabilities
44 known vulnerabilities affecting oracle/hospitality_simphony.
Total CVEs
44
CISA KEV
0
Public exploits
3
Exploited in wild
2
Severity breakdown
CRITICAL6HIGH22MEDIUM16
Vulnerabilities
Page 2 of 3
CVE-2021-2018P3HIGHCVSS 8.3v18.2.7.2v19.1.32021-01-20
CVE-2021-2018 [HIGH] CVE-2021-2018: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versi
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attack
nvd
CVE-2017-10136P3HIGHCVSS 7.5v2.92017-08-08
CVE-2017-10136 [HIGH] CVE-2017-10136: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result
nvd
CVE-2018-2672P3HIGHCVSS 7.5v2.7v2.8+1 more2018-01-18
CVE-2018-2672 [HIGH] CVE-2018-2672: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result
nvd
CVE-2018-2589P3HIGHCVSS 7.5v2.7v2.8+1 more2018-01-18
CVE-2018-2589 [HIGH] CVE-2018-2589: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Server). Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerabili
nvd
CVE-2018-2824P3HIGHCVSS 7.7v2.8v2.9+1 more2018-04-19
CVE-2018-2824 [HIGH] CVE-2018-2824: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. While the vulnerability is
nvd
CVE-2017-10206P3HIGHCVSS 7.3v2.92017-08-08
CVE-2017-10206 [HIGH] CVE-2017-10206: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in
nvd
CVE-2018-2683P3HIGHCVSS 7.5v2.7v2.8+1 more2018-01-18
CVE-2018-2683 [HIGH] CVE-2018-2683: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result
nvd
CVE-2024-20989P3HIGHCVSS 7.0≥ 19.1.0, ≤ 19.5.42024-04-16
CVE-2024-20989 [HIGH] CVE-2024-20989: Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c
Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS). Supported versions that are affected are 19.1.0-19.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability
nvd
CVE-2017-10001P3HIGHCVSS 7.6v1.7.12017-08-08
CVE-2017-10001 [HIGH] CVE-2017-10001: Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Appli
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 1.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks require human
nvd
CVE-2018-2978P3HIGHCVSS 7.1v2.8v2.9+1 more2018-07-18
CVE-2018-2978 [HIGH] CVE-2018-2978: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8, 2.9 and 2.10. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability
nvd
CVE-2017-10344P3MEDIUMCVSS 6.5v2.8v2.92017-10-19
CVE-2017-10344 [MEDIUM] CVE-2017-10344: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability
nvd
CVE-2018-2847P3MEDIUMCVSS 6.5v1.6v1.72018-04-19
CVE-2018-2847 [MEDIUM] CVE-2018-2847: Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Appli
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edition. Successful attacks of
nvd
CVE-2017-10343P3MEDIUMCVSS 6.5v2.8v2.92017-10-19
CVE-2017-10343 [MEDIUM] CWE-200 CVE-2017-10343: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human in
nvd
CVE-2018-2619P3MEDIUMCVSS 6.5v2.72018-01-18
CVE-2018-2619 [MEDIUM] CVE-2018-2619: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). The supported version that is affected is 2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in una
nvd
CVE-2019-2403P3MEDIUMCVSS 6.5v2.102019-01-16
CVE-2019-2403 [MEDIUM] CVE-2019-2403: Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications.
Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized update,
nvd
CVE-2018-2673P4MEDIUMCVSS 5.9v2.7v2.8+1 more2018-01-18
CVE-2018-2673 [MEDIUM] CVE-2018-2673: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can res
nvd
CVE-2018-2802P4MEDIUMCVSS 5.4v2.8v2.92018-04-19
CVE-2018-2802 [MEDIUM] CVE-2018-2802: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Client Application Loader). Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnera
nvd
CVE-2017-10425P4MEDIUMCVSS 5.4v2.6v2.7+2 more2017-10-19
CVE-2017-10425 [MEDIUM] CVE-2017-10425: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Service Host). Supported versions that are affected are 2.6, 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerab
nvd
CVE-2018-2853P4MEDIUMCVSS 5.4v1.6v1.72018-04-19
CVE-2018-2853 [MEDIUM] CVE-2018-2853: Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Appli
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Client Application Loader). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony First Edi
nvd
CVE-2017-10207P4MEDIUMCVSS 5.3v2.92017-08-08
CVE-2017-10207 [MEDIUM] CVE-2017-10207: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subco
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Utilities). The supported version that is affected is 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in
nvd