Known vulnerabilities in Oracle Hospitality Cruise Shipboard Property Management System

Vendor: Oracle
Software: Oracle Hospitality Cruise Shipboard Property Management System
Software CPE: cpe:2.3:a:oracle:oracle_hospitality_cruise_shipboard_property_management_system:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 25
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Hospitality Cruise Shipboard Property Management System Oracle Hospitality Cruise Shipboard Property Management System is affected by 25 known vulnerabilities: 1 critical, 2 high, 15 medium, 7 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 - 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 27 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 - 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 - 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 - 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 - 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 133 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 - 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU87706 - Out-of-bounds write
CVE-2024-29131		 CWE-787 High
No
No
 - 21.03.2024 SB2024032169
SB2024032283
SB20240417122
and 36 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 - 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 - 21.04.2023 SB2023042129
SB2023042132
SB2023060816
and 16 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305		 CWE-79 Medium
Available
No
 - 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more
#VU63225 - Data Handling
CVE-2022-29885		 CWE-19 Low
Available
No
 - 16.05.2022 SB2022051612
SB2022072044
SB20220720107
and 19 more
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU60697 - Deserialization of Untrusted Data
CVE-2021-36483		 CWE-502 Medium
No
No
 - 17.02.2022 SB2022021724
SB20221018136
SB2023011863
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 - 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more


Showing elements 1 - 20 out of 25