CVE-2017-10220

Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Property Interfaces executes to compromise Hospitality Property Interfaces. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hospitality Property Interfaces accessible data. CVSS 3.0 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/99861Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038941Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/99861Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038941Third Party Advisory, VDB Entry

Published

Aug 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10215Vulnerability in the PeopleSoft Enterprise PRTL Interaction …
• CVE-2017-10216Vulnerability in the Hospitality Property Interfaces compone…
• CVE-2017-10217Vulnerability in the Oracle Hospitality Guest Access compone…
• CVE-2017-10218Vulnerability in the Oracle Hospitality Guest Access compone…
• CVE-2017-10219Vulnerability in the Oracle Hospitality Guest Access compone…
• CVE-2017-1022Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10221Vulnerability in the Oracle Hospitality RES 3700 component o…
• CVE-2017-10222Vulnerability in the Oracle Hospitality Materials Control co…
• CVE-2017-10223Vulnerability in the Oracle Hospitality Materials Control co…
• CVE-2017-10224Vulnerability in the Oracle Hospitality Inventory Management…
• CVE-2017-10225Vulnerability in the Oracle Hospitality RES 3700 component o…
• CVE-2017-10226Vulnerability in the Oracle Hospitality Cruise Fleet Managem…