Hospitality Cruise Shipboard Property Management System vulnerabilitiesRanked by how likely they are to be used.
Hospitality Cruise Shipboard Property Management System is made by Oracle. We track 16 published vulnerabilities in it, across 9 versions. None of them is on the list of flaws known to be exploited today. If you run Hospitality Cruise Shipboard Property Management System, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Hospitality Cruise Shipboard Property Management System vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Hospitality Cruise Shipboard Property Management System's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Hospitality Cruise Shipboard Property Management System flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 75%CVE-2021-33037Medium
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when...
- 73%CVE-2022-29885High
The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an...
- 12%CVE-2021-42340High
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak.
- 9.9%CVE-2021-30640Medium
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm.
- 3.3%CVE-2021-22112High
Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single...
- 2.2%CVE-2019-10219Medium
A vulnerability was found in Hibernate-Validator.
- 1.4%CVE-2018-2621High
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Mobile Gangway and Mustering).
- 1.2%CVE-2017-10361Medium
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS).
- 1.2%CVE-2017-10228Medium
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Module).
- 0.9%CVE-2019-2411High
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite).
Running Hospitality Cruise Shipboard Property Management System? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.
- Matched to
- Hospitality Cruise Shipboard Property Management System on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 16 published vulnerabilities listed under the name Hospitality Cruise Shipboard Property Management System, across 9 versions.
None of Hospitality Cruise Shipboard Property Management System's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Hospitality Cruise Shipboard Property Management System. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.