CVE-2017-10205: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent...

Security readout for executives and security teams

CVE-2017-10205 affects Oracle Hospitality Simphony 2.9, specifically the Enterprise Management Console. A low-privileged user with HTTP network access could read some data they should not access. The cited impact is confidentiality only, with no integrity or availability impact stated. Exposure is most likely in hospitality environments still running Oracle Hospitality Simphony 2.9 with the Enterprise Management Console reachable over HTTP by non-administrative users or broad internal networks. Treat this as a focused confidentiality risk, not a broad outage or takeover issue based on available evidence. Prioritize if Simphony 2.9 is still used in production, especially where hospitality business data is accessible through the management console. Mitigation focus: Inventory Oracle Hospitality Simphony deployments and identify Enterprise Management Console version 2.9 instances.; Review Oracle's July 2017 Critical Patch Update guidance for the supported fix or upgrade path.; Restrict HTTP access to the console to trusted management networks and approved administrators..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.