[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg7UuJmUIv7oaWUVeiqub8jm1viEm6C9_a1Jq4aSaP-k":3,"g5a-ex:oracle\u002Fhospitality_cruise_shipboard_property_management_system@*":133,"g5a-family:oracle\u002Fhospitality_cruise_shipboard_property_management_system":135},{"success":4,"data":5},true,{"product":6,"versions":38,"topVulnerabilitiesByEpss":48,"kevVulnerabilities":110,"seoMetadata":111,"meta":130},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":37},"oracle","hospitality_cruise_shipboard_property_management_system",9,16,0,"2022-05-12",[14,17,20,23,25,28,30,32,34],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"19.1",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"20.1.0",5,{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},"20.2.1",1,{"version":24,"cve_count":22,"kev_count":11,"has_kev":16},"7.3.874",{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},"8.0",4,{"version":29,"cve_count":22,"kev_count":11,"has_kev":16},"8.0.0.0",{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},"8.0.2",{"version":33,"cve_count":22,"kev_count":11,"has_kev":16},"8.0.2.0",{"version":35,"cve_count":36,"kev_count":11,"has_kev":16},"8.0.8",3,"Hospitality Cruise Shipboard Property Management System by Oracle is a technology product with 9 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[39,40,41,42,43,44,45,46,47],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},{"version":24,"cve_count":22,"kev_count":11,"has_kev":16},{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},{"version":29,"cve_count":22,"kev_count":11,"has_kev":16},{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},{"version":33,"cve_count":22,"kev_count":11,"has_kev":16},{"version":35,"cve_count":36,"kev_count":11,"has_kev":16},[49,57,63,68,73,79,85,92,98,104],{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":56},"CVE-2021-33037","Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP\u002F1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.","2021-07-12",5.3,"v3.1","Medium",0.74667,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":60,"cvssVersion":54,"severity":61,"isKev":16,"epssScore":62},"CVE-2022-29885","The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.",7.5,"High",0.73474,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":60,"cvssVersion":54,"severity":61,"isKev":16,"epssScore":67},"CVE-2021-42340","The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.","2021-10-14",0.11796,{"cveId":69,"description":70,"publishedDate":52,"cvssScore":71,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":72},"CVE-2021-30640","A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and\u002For to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.",6.5,0.09886,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":54,"severity":61,"isKev":16,"epssScore":78},"CVE-2021-22112","Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.","2021-02-23",8.8,0.03286,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":84},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",6.1,0.02157,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":90,"severity":61,"isKev":16,"epssScore":91},"CVE-2018-2621","Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Mobile Gangway and Mustering). The supported version that is affected is 7.3.874. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Shipboard Property Management System accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N).","2018-01-18",8.2,"v3.0",0.01351,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":90,"severity":55,"isKev":16,"epssScore":97},"CVE-2017-10361","Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. While the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality Cruise Shipboard Property Management System. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:N\u002FA:L).","2017-10-19",6.4,0.01168,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":90,"severity":55,"isKev":16,"epssScore":103},"CVE-2017-10228","Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Module). The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Shipboard Property Management System accessible data as well as unauthorized read access to a subset of Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N).","2017-08-08",5.4,0.01154,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"cvssVersion":90,"severity":61,"isKev":16,"epssScore":109},"CVE-2019-2411","Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality Cruise Shipboard Property Management System, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Cruise Shipboard Property Management System as well as unauthorized update, insert or delete access to some of Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 7.6 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:N\u002FI:L\u002FA:H).","2019-01-16",7.6,0.0091,[],{"title":112,"metaDescription":113,"keywords":114,"structuredData":115},"Hospitality Cruise Shipboard Property Management System by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Hospitality Cruise Shipboard Property Management System by Oracle covering 9 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Hospitality Cruise Shipboard Property Management System vulnerabilities, Hospitality Cruise Shipboard Property Management System security, Hospitality Cruise Shipboard Property Management System CVE, Oracle Hospitality Cruise Shipboard Property Management System, Hospitality Cruise Shipboard Property Management System threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":116,"@type":117,"name":118,"description":113,"url":119,"manufacturer":120,"applicationCategory":124,"softwareVersion":125,"mainEntity":126},"https:\u002F\u002Fschema.org","SoftwareApplication","Hospitality Cruise Shipboard Property Management System","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fhospitality_cruise_shipboard_property_management_system",{"@type":121,"name":122,"url":123},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","9 versions tracked",{"@type":127,"name":128,"description":129,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Hospitality Cruise Shipboard Property Management System Security Vulnerabilities","Security vulnerabilities affecting Hospitality Cruise Shipboard Property Management System by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":131,"apiVersion":132},"2026-10-17T14:59:59.035Z","3.0",{"rows":134,"total":11,"capped":16,"failed":11},[],[]]