Known vulnerabilities in Oracle Hospitality Simphony

Vendor: Oracle
Software: Oracle Hospitality Simphony
Software CPE: cpe:2.3:a:oracle:oracle_hospitality_simphony:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 12
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Hospitality Simphony Oracle Hospitality Simphony is affected by 12 known vulnerabilities: 5 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107516 - Improper input validation
CVE-2025-30686		 CWE-20 Medium
No
No
 - 16.04.2025 SB20250416134
#VU98626 - Improper input validation
CVE-2021-36713		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015172
#VU88632 - Improper input validation
CVE-2024-20997		 CWE-20 High
No
No
 - 17.04.2024 SB2024041749
#VU88633 - Improper input validation
CVE-2024-21010		 CWE-20 High
No
No
 - 17.04.2024 SB2024041749
#VU88634 - Improper input validation
CVE-2024-21014		 CWE-20 High
No
No
 - 17.04.2024 SB2024041749
#VU88635 - Improper input validation
CVE-2024-20989		 CWE-20 Medium
No
No
 - 17.04.2024 SB2024041749
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 - 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU49772 - Improper input validation
CVE-2018-1285		 CWE-20 High
No
No
 - 20.01.2021 SB2021012037
SB2021042549
SB2022012806
and 9 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more