CVE-2017-10069 Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 6.1.1. Difficult to exploit vulnerability all...
MediumCVSS 5.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications (subcomponent: Core). The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Payment Interface accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle payment interface | = 6.1.1 | No fix listed |
| oracle Payment Gateway Services | = 6.1.1 | No fix listed |
References
- www.oracle.com patch vendor-advisory
- 99721 third-party-advisory vdb-entry
- 1038941 third-party-advisory vdb-entry