CVE-2017-10197

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Folios). The supported version that is affected is 5.4.2.x through 5.5.1.x. Easily exploitable vulnerability allows physical access to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

• CWE-200

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/101459Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/101459Third Party Advisory, VDB Entry

Published

Oct 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10191Vulnerability in the Oracle Web Analytics component of Oracl…
• CVE-2017-10192Vulnerability in the Oracle iStore component of Oracle E-Bus…
• CVE-2017-10193Vulnerability in the Java SE, Java SE Embedded component of …3.1
• CVE-2017-10194Vulnerability in the Oracle Integrated Lights Out Manager (I…
• CVE-2017-10195Vulnerability in the Oracle Hospitality Simphony component o…
• CVE-2017-10196Vulnerability in the Oracle Outside In Technology component …
• CVE-2017-10198Vulnerability in the Java SE, Java SE Embedded, JRockit comp…6.8
• CVE-2017-10199Vulnerability in the Oracle iLearning component of Oracle iL…
• CVE-2017-1020Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10200Vulnerability in the Oracle Hospitality e7 component of Orac…
• CVE-2017-10201Vulnerability in the Oracle Hospitality e7 component of Orac…
• CVE-2017-10202Vulnerability in the OJVM component of Oracle Database Serve…