Vulnerability in Oracle Hospitality Cruise Shipboard Property Management System

CVE-2018-3000

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. While the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.006 (47.6th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 48th percentile — 47.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2018-3000: held from 0.006 to 0.006.

EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000

Affected products

References

Frequently asked questions

What is CVE-2018-3000?
CVE-2018-3000 is a high-severity vulnerability in Oracle Hospitality Cruise Shipboard Property Management System. CVSS score: 7.1/10. Published 2018-07-18.
How severe is CVE-2018-3000?
High severity. CVSS v3 base score is 7.1 out of 10.