Known vulnerabilities in Oracle Hospitality Cruise Shipboard Property Management System

Vendor: Oracle
Software: Oracle Hospitality Cruise Shipboard Property Management System
Software CPE: cpe:2.3:a:oracle:oracle_hospitality_cruise_shipboard_property_management_system:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 25
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Hospitality Cruise Shipboard Property Management System Oracle Hospitality Cruise Shipboard Property Management System is affected by 25 known vulnerabilities: 1 critical, 2 high, 15 medium, 7 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 - 17.02.2026 -
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 -
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 - 13.08.2025 -
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 -
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 -
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 - 10.03.2025 -
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 - 24.01.2025 -
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 - 18.11.2024 -
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 - 12.11.2024 -
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 -
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 - 03.07.2024 -
#VU87706 - Out-of-bounds write
CVE-2024-29131		 CWE-787 High
No
No
 - 21.03.2024 -
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 - 19.01.2024 -
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 - 21.04.2023 -
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 -
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305		 CWE-79 Medium
Available
No
 - 23.06.2022 -
#VU63225 - Data Handling
CVE-2022-29885		 CWE-19 Low
Available
No
 - 16.05.2022 -
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 -
#VU60697 - Deserialization of Untrusted Data
CVE-2021-36483		 CWE-502 Medium
No
No
 - 17.02.2022 -
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 - 15.10.2021 -


Showing elements 1 - 20 out of 25