Oracle Hospitality Cruise Shipboard Property Management System vulnerabilities

16 CVEs affecting Oracle Hospitality Cruise Shipboard Property Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-29885, published 2022-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-33037, published 2021-07-12. Medium severity, CVSS 5.3. EPSS: 74.7% chance of exploitation in the next 30 days. Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request…
CVE-2022-29885, published 2022-05-12. High severity, CVSS 7.5. EPSS: 73.5% chance of exploitation in the next 30 days. The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to…
CVE-2021-42340, published 2021-10-14. High severity, CVSS 7.5. EPSS: 11.8% chance of exploitation in the next 30 days. The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics…
CVE-2021-30640, published 2021-07-12. Medium severity, CVSS 6.5. EPSS: 9.9% chance of exploitation in the next 30 days. A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This…
CVE-2021-22112, published 2021-02-23. High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days. Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once…
CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2018-2621, published 2018-01-18. High severity, CVSS 8.2. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Mobile Gangway and Mustering). The supported version…
CVE-2017-10361, published 2017-10-19. Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is…
CVE-2017-10228, published 2017-08-08. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Module). The supported version that is affected is…
CVE-2019-2411, published 2019-01-16. High severity, CVSS 7.6. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is…

Latest

CVE-2019-2410, published 2019-01-16. Medium severity, CVSS 5.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: DGS RES Online, FMS Sender, FMS Receiver, OHC WPF…
CVE-2019-2409, published 2019-01-16. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is…
CVE-2018-3181, published 2018-10-17. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC ENOAD). The supported version that is affected is…