Known vulnerabilities in Oracle Hospitality Guest Access

Known vulnerabilities in Oracle Hospitality Guest Access

Vendor: Oracle

Software: Oracle Hospitality Guest Access

Software CPE: cpe:2.3:a:oracle:oracle_hospitality_guest_access:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 7

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU34161 - Operation on a Resource after Expiration or Release CVE-2019-17638	CWE-672	High	No	No	-	09.07.2020	SB2020070939 SB2020081709 SB2020102107 and 11 more
#VU28158 - Deserialization of Untrusted Data CVE-2020-9484	CWE-502	High	Available	No	-	21.05.2020	SB2020052124 SB2020052501 SB2020053102 and 47 more
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-1938	CWE-22	High	Available	Exploited	-	21.02.2020	SB2020022111 SB2020031401 SB2020031402 and 31 more
#VU25067 - Improper input validation CVE-2019-10247	CWE-20	Medium	No	No	-	07.02.2020	SB2020011489 SB2020032710 SB2020042110 and 25 more
#VU24468 - Improper input validation CVE-2019-0227	CWE-20	Medium	Available	No	-	21.01.2020	SB2020012205 SB2020012308 SB2020012309 and 40 more
#VU22272 - Missing release of memory after effective lifetime CVE-2019-17359	CWE-401	Medium	No	No	-	24.10.2019	SB2019102418 SB2020011478 SB2020042338 and 14 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more