HG
Product
Hospitality Guest Access
On CISA KEVExploited in the wild
33
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 21Low 0
Watch
Add Hospitality Guest Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12617 In wildKEV | 8.1 | Oct 3 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g Affected: 4.2.0; 4.2.1 |
| CVE-2018-1258 | 8.8 | May 11 | Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security Affected: 4.2.0; 4.2.1 |
| CVE-2017-10372 | 8.7 | Oct 19 | Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base) Affected: 4.2.0; 4.2.1 |
| CVE-2019-17359 | 7.5 | Oct 8 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data Affected: 4.2.0 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 4.2.0; 4.2.1 |
| CVE-2019-0190 | 7.5 | Jan 30 | A bug exists in the way mod_ssl handled client renegotiations Affected: 4.2.0; 4.2.1 |
| CVE-2018-11040 | 7.5 | Jun 25 | Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON… Affected: 4.2.0; 4.2.1 |
| CVE-2018-2604 | 7.5 | Jan 18 | Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base) Affected: 4.2.1 |
| CVE-2017-9735 | 7.5 | Jun 16 | Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before… Affected: 4.2.0; 4.2.1 |
| CVE-2020-9484 | 7.0 | May 20 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a… Affected: 4.2.0; 4.2.1 |
Showing 10