CVE-2017-10389

CVE-2017-10389 is a vulnerability in the Oracle Hospitality Suite8 component (specifically the PMS subcomponent), affecting versions 8.10.1 and 8.10.2. This easily exploitable vulnerability allows a low-privileged attacker with logon access to the infrastructure where Suite8 executes to compromise the application. Successful attacks, which require human interaction from a third party, can lead to unauthorized data modification, insertion, deletion, read access to a subset of data, and partial denial of service. With a CVSS 3.0 Base Score of 5.7 (Medium), the attack vector is local, with low attack complexity and low privileges required, but requires user interaction. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.