Oracle

Hospitality Simphony

44 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7

CVE-2024-20989

  • EPSS 0.52%
  • Veröffentlicht 16.04.2024 22:15:11
  • Zuletzt bearbeitet 27.11.2024 16:36:51

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS). Supported versions that are affected are 19.1.0-19.5.4. Difficult to exploit vulnerability allows unauthenticated attacker w...

5.1

CVE-2021-2018

  • EPSS 1.44%
  • Veröffentlicht 20.01.2021 15:15:46
  • Zuletzt bearbeitet 21.11.2024 06:02:11

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compro...

9.8

CVE-2018-1285

  • EPSS 17.37%
  • Veröffentlicht 11.05.2020 17:15:10
  • Zuletzt bearbeitet 21.11.2024 03:59:32

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

6.1

CVE-2020-11022

Exploit
  • EPSS 99.02%
  • Veröffentlicht 29.04.2020 22:15:11
  • Zuletzt bearbeitet 13.04.2026 15:16:29

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in...

6.1

CVE-2019-11358

Exploit
  • EPSS 87.22%
  • Veröffentlicht 20.04.2019 00:29:00
  • Zuletzt bearbeitet 21.11.2024 04:20:56

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the n...

6.5

CVE-2019-2403

  • EPSS 1.17%
  • Veröffentlicht 16.01.2019 19:30:30
  • Zuletzt bearbeitet 21.11.2024 04:40:48

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comp...

7.7

CVE-2019-2402

  • EPSS 1.67%
  • Veröffentlicht 16.01.2019 19:30:30
  • Zuletzt bearbeitet 21.11.2024 04:40:48

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to co...

7.1

CVE-2018-2978

  • EPSS 1.74%
  • Veröffentlicht 18.07.2018 13:29:04
  • Zuletzt bearbeitet 21.11.2024 04:04:53

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8, 2.9 and 2.10. Difficult to exploit vulnerability allows low privileged attacker...

6.5

CVE-2018-2847

  • EPSS 1.46%
  • Veröffentlicht 19.04.2018 02:29:06
  • Zuletzt bearbeitet 21.11.2024 04:04:36

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attac...

5.5

CVE-2018-2853

  • EPSS 0.8%
  • Veröffentlicht 19.04.2018 02:29:06
  • Zuletzt bearbeitet 21.11.2024 04:04:37

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Client Application Loader). Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability ...