CVE-2018-2956 : Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of O

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration). The supported version that is affected is 5.5.x. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality OPERA 5 Property Services executes to compromise Oracle Hospitality OPERA 5 Property Services. While the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

Published 2018-07-18 13:29:03

Updated 2019-10-03 00:03:26

Source Oracle

View at NVD, CVE.org

Products affected by CVE-2018-2956

Oracle » Hospitality Opera Property Management » Version: 5.5.1
cpe:2.3:a:oracle:hospitality_opera_property_management:5.5.1:*:*:*:*:*:*:*
Matching versions
Oracle » Hospitality Opera Property Management » Version: 5.5
cpe:2.3:a:oracle:hospitality_opera_property_management:5.5:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-2956

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 42 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-2956

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P	3.4	6.4	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.1	HIGH	CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	1.4	6.0	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

References for CVE-2018-2956

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

CPU July 2018
Patch;Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/104818

Oracle Hospitality OPERA 5 Property Services CVE-2018-2956 Local Security Vulnerability
Broken Link;Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1041300

Oracle Hospitality Applications Multiple Flaws Let Remote and Local Users Access Data, Remote Authenticated Users Modify Data and Deny Service, and Local Users Gain Elevated Privileges - SecurityTrack
Third Party Advisory;VDB Entry

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-2956

Products affected by CVE-2018-2956

Exploit prediction scoring system (EPSS) score for CVE-2018-2956

CVSS scores for CVE-2018-2956

References for CVE-2018-2956