CVE-2017-10217: Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcompo...

Security readout for executives and security teams

This vulnerability affects Oracle Hospitality Guest Access and could let a low-privileged user change some application data over HTTP. The documented impact is data integrity only: unauthorized updates, inserts, or deletes. It is not described as exposing data or causing outages, but affected hospitality systems should still be corrected because guest-access data may support business operations. Exposure is limited to organizations running Oracle Hospitality Guest Access 4.2.0.0 or 4.2.1.0 with HTTP access available to authenticated low-privileged users. Hospitality environments using these legacy versions should check internet, partner, guest, and internal network reachability. Treat as a moderate-priority legacy Oracle risk. It does not indicate data theft or outage, but unauthorized data modification can affect guest-facing operations and trust. Prioritize if the affected system is still in use or reachable beyond a tightly controlled network. Mitigation focus: Identify any Oracle Hospitality Guest Access deployments and versions.; Review Oracle's July 2017 Critical Patch Update guidance for this product.; Apply vendor-recommended updates or compensating controls from Oracle guidance..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.