← Vulnerability feed

Vulnerability record · CVE-2017-10222 · published 8 August 2017

CVE-2017-10222: Oracle hospitality materials control vulnerability

Oracle · Hospitality Materials Control

Vulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications (subcomponent: Production Tool). Supported versions that are affected are 8.31.4 and 8.32.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Materials Control accessible data as well as unauthorized read access to a subset of Oracle Hospitality Materials Control accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

5.4 CVSS 3.0 Medium EPSS 1.2% · top 33.1%
5.4CVSS 3.0 base score, v2 5.5
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Vulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications (subcomponent: Production Tool). Supported versions that are affected are 8.31.4 and 8.32.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Materials Control accessible data as well as unauthorized read access to a subset of Oracle Hospitality Materials Control accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html PatchVendor Advisory
http://www.securityfocus.com/bid/99701 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038941 Third Party AdvisoryVDB Entry
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html PatchVendor Advisory
http://www.securityfocus.com/bid/99701 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038941 Third Party AdvisoryVDB Entry

Track CVE-2017-10222 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.1CVE-2021-41182Jqueryui jquery ui cross-site scripting vulnerabilityjQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widg…EPSS 39%6.1CVE-2021-41184Jqueryui jquery ui cross-site scripting vulnerabilityjQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util fr…EPSS 41%6.1CVE-2020-11022jQuery DOM manipulation methods allow XSS even after sanitizationjQuery versions 1.12.0 through 3.4.x execute untrusted code when HTML from untrusted sources is passed to DOM manipulation methods such as .html() an…EPSS 99%analysed6.1CVE-2019-11358jQuery extend() prototype pollution via unsanitized __proto__jQuery before 3.4.0 mishandles jQuery.extend(true, {}, ...) so that an unsanitized source object containing an enumerable __proto__ property can exte…EPSS 87%analysed6.1CVE-2015-9251Jquery cross-site scripting vulnerabilityjQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, ca…EPSS 30%5.4CVE-2017-10223Oracle hospitality materials control vulnerabilityVulnerability in the Oracle Hospitality Materials Control component of Oracle Hospitality Applications (subcomponent: Purchasing). Supported versions…EPSS 1.2%

Source: NIST National Vulnerability Database (record CVE-2017-10222), CISA KEV, FIRST EPSS (scores of 2026-10-13). This page is refreshed as NVD updates the record.