Vulnerabilities

TI-2026-43256 CVE-2026-60591 · GHSA-4hwm-h3wc-xrfj

Missing authentication in Oracle Hospitality Simphony

HIGH 80

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-306

TI-2026-43255 CVE-2026-60590 · GHSA-vhrf-w2g7-c2rq

Improper access control in Oracle Hospitality Simphony

LOW 39

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284

TI-2026-42871 CVE-2026-60170 · GHSA-j5mf-c9m3-5cvr

Improper access control in Oracle Hospitality Simphony

LOW 39

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284

TI-2026-42870 CVE-2026-60169 · GHSA-279h-cv64-q2h5

Missing authentication in Oracle Hospitality Simphony

LOW 37

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-306

TI-2026-42869 CVE-2026-60168 · GHSA-45mx-r22v-3pcj

Improper access control in Oracle Hospitality Simphony

MEDIUM 48

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-07-21 No fix listed CWE-284

TI-2026-42868 CVE-2026-60167 · GHSA-m6r4-hh78-25rp

Information disclosure in Oracle Hospitality Simphony

LOW 39

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-07-21 No fix listed CWE-200

TI-2025-21959 CVE-2025-30686 · GHSA-73ch-cpx9-cfrm

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage…

LOW 36

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: EMC).

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00631 Published 2025-04-15 No fix listed CWE-497

TI-2024-13806 CVE-2024-21014 · GHSA-q3x9-cqxj-2x38

Missing authentication in Oracle Hospitality Simphony

MEDIUM 50

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2024-04-16 No fix listed CWE-306

TI-2024-13802 CVE-2024-21010 · GHSA-jp94-w382-qgwr

Incorrect authorization in Oracle Hospitality Simphony

MEDIUM 44

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00735 Published 2024-04-16 No fix listed CWE-863

TI-2024-13789 CVE-2024-20997 · GHSA-g7m8-98h3-rj3p

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage…

MEDIUM 44

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00833 Published 2024-04-16 No fix listed

TI-2024-13781 CVE-2024-20989 · GHSA-7fv8-55hq-39rx

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage…

LOW 31

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS).

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.0052 Published 2024-04-16 No fix listed

TI-2021-01704 CVE-2021-2018 · GHSA-q87v-4pg3-cw3m

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01459 Published 2021-01-20 No fix listed

TI-2018-01190 CVE-2018-1285 · GHSA-2cwj-8chv-9pp9

XML external entity injection in Apache log4net

MEDIUM 59

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17823 Published 2020-05-11 Fixed in 2.0.10 CWE-611

TI-2020-08896 CVE-2020-11022 · GHSA-gxr4-xjj5-5px2

jQuery has a potential XSS vulnerability

HIGH 75

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.99215 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 +2 CWE-79

TI-2019-08480 CVE-2019-11358 · GHSA-6c3j-c64m-qhgq

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles…

HIGH 69

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.8682 Published 2019-04-19 Partial fix · 3.4.0, 4.3.4 +3 CWE-1321

TI-2019-01962 CVE-2019-2403 · GHSA-8v36-rp29-c4fc

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage…

LOW 37

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.0117 Published 2019-01-16 No fix listed

TI-2019-01961 CVE-2019-2402 · GHSA-2p8f-6w8g-hmx8

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage…

LOW 39

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications.

CVSS 3.0HIGH 7.7 Network No auth No interaction EPSS 0.01669 Published 2019-01-16 No fix listed

TI-2018-02281 CVE-2018-2978 · GHSA-xhh7-q873-6hpj

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality…

LOW 37

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export).

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01716 Published 2018-07-18 No fix listed

TI-2018-02162 CVE-2018-2853 · GHSA-hrrf-ww67-wf58

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle…

LOW 26

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Client Application Loader).

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00753 Published 2018-04-19 No fix listed

TI-2018-02160 CVE-2018-2851 · GHSA-m8wh-qwmw-xcfq

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle…

MEDIUM 40

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console).

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01422 Published 2018-04-19 No fix listed

TI-2018-02157 CVE-2018-2848 · GHSA-whjp-w8p7-gjfr

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle…

MEDIUM 43

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Client Application Loader).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0187 Published 2018-04-19 No fix listed

TI-2018-02156 CVE-2018-2847 · GHSA-99rx-wrcc-q3q7

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle…

LOW 32

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01379 Published 2018-04-19 No fix listed

TI-2018-02142 CVE-2018-2833 · GHSA-xjgr-wjrp-qfw3

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality…

MEDIUM 40

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console).

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01422 Published 2018-04-19 No fix listed

TI-2018-02138 CVE-2018-2829 · GHSA-jwrm-469c-3rgc

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality…

MEDIUM 46

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console).

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.01526 Published 2018-04-19 No fix listed

TI-2018-02133 CVE-2018-2824 · GHSA-3gjx-4mvg-m9pc

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality…

LOW 36

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console).

CVSS 3.0HIGH 7.7 Network Low privileges No interaction EPSS 0.01326 Published 2018-04-19 No fix listed

Vulnerabilities

Filters