CVE-2017-10389: Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent:...

Security readout for executives and security teams

This flaw affects Oracle Hospitality Suite8 PMS 8.10.1 and 8.10.2. A low-privileged attacker who can log on to the Suite8 infrastructure could, with another user's interaction, read or change some Suite8 data and cause partial service disruption. It matters most for hospitality operators still running these older versions. Exposure is limited to Oracle Hospitality Suite8 PMS deployments running supported affected versions 8.10.1 or 8.10.2. Internet exposure is not indicated; the attacker needs logon access to the infrastructure where Suite8 executes. Treat this as a moderate legacy application risk. Prioritize if Suite8 supports active hotel operations or contains guest, reservation, billing, or operational data. Urgency is lower than internet-exposed critical flaws, but unpatched affected deployments should be remediated through Oracle guidance. Mitigation focus: Inventory Oracle Hospitality Suite8 PMS deployments and versions.; Review Oracle's October 2017 CPU guidance for the supported fix path.; Apply vendor-supported patches or upgrades for affected Suite8 versions..

Prepared

Jun 12, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.