Oracle Hospitality Cruise Affairwhere vulnerabilities

2 CVEs affecting Oracle Hospitality Cruise Affairwhere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-10396, published 2017-10-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-10396, published 2017-10-19. Critical severity, CVSS 9.9. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AffairWhere). Supported versions that are affected are 2.2.5.0, 2.2.6.0 and…
CVE-2017-10231, published 2017-08-08. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AWExport). The supported version that is affected is 2.2.05.062. Easily…