N/A

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Simphony accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Simphony. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L).

N/A

N/A

Oracle Food and Beverage Applications Hospitality Simphony 访问控制错误漏洞

Oracle Food and Beverage Applications是美国甲骨文（Oracle）公司的一套餐饮销售管理解决方案。Hospitality Simphony是其中的一个基于云的酒店管理组件。 Oracle Food and Beverage Applications中的Hospitality Simphony组件2.10版本存在安全漏洞。远程攻击者可利用该漏洞未授权访问、创建、删除或修改数据，造成拒绝服务，影响数据的可用性、保密性和完整性。

N/A

N/A