Oracle Hospitality Cruise Fleet Management vulnerabilities

18 CVEs affecting Oracle Hospitality Cruise Fleet Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3166, published 2018-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-9251, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 29.7% chance of exploitation in the next 30 days. jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2016-7103, published 2017-03-15. Medium severity, CVSS 6.1. EPSS: 22.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
CVE-2018-2984, published 2018-07-18. High severity, CVSS 8.1. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Gangway Activity Web App). The supported version that is affected is…
CVE-2018-3163, published 2018-10-17. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0.…
CVE-2017-10226, published 2017-08-08. High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is affected is…
CVE-2018-2700, published 2018-01-18. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is…
CVE-2018-2697, published 2018-01-18. Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is…
CVE-2018-3158, published 2018-10-17. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0.…
CVE-2018-3166, published 2018-10-17. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0.…
CVE-2018-2850, published 2018-04-19. High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is…

Latest

CVE-2018-3159, published 2018-10-17. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Sender and Receiver). The supported version that is affected is 9.0. Easily…
CVE-2018-3003, published 2018-07-18. Medium severity, CVSS 6.2. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is…
CVE-2018-3002, published 2018-07-18. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite). The supported version that is…
CVE-2018-2701, published 2018-01-18. High severity, CVSS 7.6. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is…