PT-2020-3593

CVE-2020-14561

·

Published

2020-07-15

·

Updated

2020-07-21

Description by

CVSS 3.1
7.3
High
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0
Description The issue is related to insufficient input validation in the Installation component of Oracle Hospitality Reporting and Analytics, allowing a low-privileged attacker with logon access to the infrastructure to compromise the system. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of Oracle Hospitality Reporting and Analytics.
Recommendations For version 9.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾