CVE-2017-10056: Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications (subcomponent: Pr...

Security readout for executives and security teams

CVE-2017-10056 affects Oracle Hospitality 9700 version 4.0. A low-privileged user who can log on to the infrastructure running the product could access critical or all data reachable by that Oracle Hospitality 9700 deployment. This is a data-confidentiality issue, not an integrity or availability issue in the supplied description. Exposure is limited to organizations running Oracle Hospitality 9700 version 4.0, especially where low-privileged infrastructure logons are broadly granted or poorly monitored. Prioritize remediation where Oracle Hospitality 9700 stores sensitive guest, property, or payment-adjacent operational data and where many users have host logon access. The issue is moderate overall, but business impact can be high if critical hospitality data is exposed. Mitigation focus: Review Oracle's July 2017 Critical Patch Update guidance for this CVE.; Apply the relevant Oracle Hospitality 9700 updates where applicable.; Restrict infrastructure logon rights to necessary administrators and service accounts..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.