Oracle Hospitality Reporting And Analytics vulnerabilities

30 CVEs affecting Oracle Hospitality Reporting And Analytics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-21828, published 2023-01-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-9251, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 29.7% chance of exploitation in the next 30 days. jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2019-10086, published 2019-08-20. High severity, CVSS 7.3. EPSS: 28.4% chance of exploitation in the next 30 days. In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all…
CVE-2021-2351, published 2021-07-21. High severity, CVSS 8.3. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows…
CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2017-10405, published 2017-10-19. Critical severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily…
CVE-2017-10402, published 2017-10-19. Critical severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). Supported versions that are affected are 8.5.1 and 9.0.0. Easily…
CVE-2018-3128, published 2018-10-17. High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability…
CVE-2019-2401, published 2019-01-16. High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability…
CVE-2019-2937, published 2019-10-16. High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability…
CVE-2017-10097, published 2017-08-08. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0.…

Latest

CVE-2023-21828, published 2023-01-18. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting). The supported version that is affected is 9.1.0. Easily…
CVE-2023-21826, published 2023-01-18. High severity, CVSS 7.6. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting). The supported version that is affected is 9.1.0. Easily…
CVE-2021-2395, published 2021-07-21. High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: iCare, Configuration). The supported version that is affected is 9.1.0.…
CVE-2021-1997, published 2021-01-20. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report). The supported version that is affected is 9.1.0. Easily…
CVE-2020-14753, published 2020-10-21. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily…
CVE-2020-14543, published 2020-07-15. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily…
CVE-2020-2746, published 2020-04-15. High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability…