CVE-2017-10208: Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other).

Security readout for executives and security teams

CVE-2017-10208 affects Oracle Hospitality e7 4.2.1. A low-privileged attacker with SMTP network access could read a limited subset of e7 data. The cited impact is confidentiality only, with no stated integrity or availability effect. Exposure is most likely where Oracle Hospitality e7 version 4.2.1 remains deployed and reachable over SMTP by low-privileged users or internal network segments. No other affected versions are named in the sources. Treat this as a targeted confidentiality risk for hospitality systems, not an internet-wide emergency based on the supplied evidence. Prioritize confirmation and remediation if e7 4.2.1 handles guest, payment-adjacent, or operationally sensitive data. Mitigation focus: Check Oracle's July 2017 Critical Patch Update guidance for e7 remediation.; Upgrade or patch Oracle Hospitality e7 according to Oracle-supported instructions.; Restrict SMTP reachability to trusted systems and required network paths only..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.