Oracle
Oracle Hospitality Simphony: vulnerabilidades y CVE
Oracle Hospitality Simphony tiene 44 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE44
Últimos 12 meses6
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-60591 | Crítica (9.1) | 0.45% | — | 18 ago 2026 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable… |
| CVE-2026-60590 | Alta (7.5) | 0.41% | — | 18 ago 2026 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable… |
| CVE-2026-60170 | Alta (7.5) | 0.41% | — | 21 jul 2026 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable… |
| CVE-2026-60169 | Alta (8.1) | 0.39% | — | 21 jul 2026 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Difficult to exploit… |
| CVE-2026-60168 | Crítica (9.1) | 0.45% | — | 21 jul 2026 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable… |
| CVE-2026-60167 | Alta (7.5) | 0.44% | — | 21 jul 2026 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable… |
| CVE-2025-30686 | Alta (7.6) | 0.61% | — | 15 abr 2025 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: EMC). Supported versions that are affected are 19.1-19.7. Easily exploitable vulnerability allows low… |
| CVE-2024-21014 | Crítica (9.8) | 0.84% | — | 16 abr 2024 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable… |
| CVE-2024-21010 | Crítica (9.9) | 0.73% | — | 16 abr 2024 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable… |
| CVE-2024-20997 | Crítica (9.9) | 0.83% | — | 16 abr 2024 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable… |
| CVE-2024-20989 | Alta (7) | 0.52% | — | 16 abr 2024 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS). Supported versions that are affected are 19.1.0-19.5.4. Difficult to exploit vulnerability… |
| CVE-2021-2018 | Alta (8.3) | 1.4% | — | 20 ene 2021 | Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network… |
| CVE-2018-1285 | Crítica (9.8) | 17% | — | 11 may 2020 | Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net… |
| CVE-2020-11022 | Media (6.1) | 99% | — | 29 abr 2020 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted… |
| CVE-2019-11358 | Media (6.1) | 87% | — | 20 abr 2019 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__… |
| CVE-2019-2403 | Media (6.5) | 1.2% | — | 16 ene 2019 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with… |
| CVE-2019-2402 | Alta (7.7) | 1.7% | — | 16 ene 2019 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker… |
| CVE-2018-2978 | Alta (7.1) | 1.7% | — | 18 jul 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). Supported versions that are affected are 2.8, 2.9 and 2.10. Difficult to exploit vulnerability… |
| CVE-2018-2853 | Media (5.4) | 0.75% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Client Application Loader). Supported versions that are affected are 1.6 and 1.7.… |
| CVE-2018-2851 | Alta (8.1) | 1.4% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 1.6 and 1.7. Easily… |
| CVE-2018-2848 | Alta (7.5) | 1.9% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Client Application Loader). Supported versions that are affected are 1.6 and 1.7. Easily… |
| CVE-2018-2847 | Media (6.5) | 1.4% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). Supported versions that are affected are 1.6 and 1.7. Easily exploitable… |
| CVE-2018-2833 | Alta (8.1) | 1.4% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily… |
| CVE-2018-2829 | Alta (8.6) | 1.5% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.10. Easily exploitable… |
| CVE-2018-2824 | Alta (7.7) | 1.3% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable… |
| CVE-2018-2802 | Media (5.4) | 0.78% | — | 19 abr 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Client Application Loader). Supported versions that are affected are 2.8 and 2.9. Easily exploitable… |
| CVE-2018-2683 | Alta (7.5) | 1.5% | — | 18 ene 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows… |
| CVE-2018-2673 | Media (5.9) | 1.3% | — | 18 ene 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows… |
| CVE-2018-2672 | Alta (7.5) | 1.6% | — | 18 ene 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Easily exploitable vulnerability allows… |
| CVE-2018-2636 | Alta (8.1) | 15% | — | 18 ene 2018 | Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.