Oracle Hospitality Inventory Management vulnerabilities

7 CVEs affecting Oracle Hospitality Inventory Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-41184, published 2021-10-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-41184, published 2021-10-26. Medium severity, CVSS 6.1. EPSS: 40.8% chance of exploitation in the next 30 days. jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code.…
CVE-2021-41182, published 2021-10-26. Medium severity, CVSS 6.1. EPSS: 39.4% chance of exploitation in the next 30 days. jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted…
CVE-2021-41183, published 2021-10-26. Medium severity, CVSS 6.1. EPSS: 8.5% chance of exploitation in the next 30 days. jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted…
CVE-2021-2351, published 2021-07-21. High severity, CVSS 8.3. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows…
CVE-2017-10224, published 2017-08-08. Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Supported versions that are affected are 8.5.1 and…
CVE-2017-10002, published 2017-08-08. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Settings and Config). Supported versions that are affected are 8.5.1 and…
CVE-2021-2311, published 2021-04-22. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications (component: Export to Reporting and Analytics). The supported version that is affected is…