Oracle Corp. Hospitality Reporting and Analytics

Name: Oracle Corp. Hospitality Reporting and Analytics
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical7high5medium2low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	≤ 9.1
CVE-2015-6420US	critical9.8	15.2% (97th)	Exploit	no fix	2015-12-15	—
CVE-2019-2950US	medium4.9	3.05% (88th)	—	no fix	2019-10-16	≤ 9.1.0
CVE-2018-3128US	high8.1	1.64% (76th)	—	no fix	2018-10-17	2 versions
CVE-2019-2401US	high8.1	1.60% (76th)	—	no fix	2019-01-16	≤ 9.1.0
CVE-2019-2937US	high8.1	1.57% (75th)	—	no fix	2019-10-16	≤ 9.1.0
CVE-2021-2395US	high8.5	1.41% (72nd)	—	no fix	2021-07-21	≤ 9.1.0
CVE-2019-2934US	high8.1	1.37% (72nd)	—	no fix	2019-10-16	≤ 9.1.0
CVE-2019-2936US	medium6.8	1.34% (71st)	—	no fix	2019-10-16	≤ 9.1.0
CVE-2021-1997US	medium5.5	1.27% (70th)	—	no fix	2021-01-20	≤ 9.1.0
CVE-2019-2947US	high7.1	1.24% (69th)	—	no fix	2019-10-16	≤ 9.1.0
CVE-2020-14616US	low2.7	0.99% (62nd)	—	no fix	2020-07-15	≤ 9.1.0
CVE-2023-21828US	—	0.55% (46th)	—	no fix	2023-01-18	≤ 9.1.0
CVE-2023-21826US	—	0.53% (44th)	—	no fix	2023-01-18	≤ 9.1.0
CVE-2020-14543US	high7.3	0.46% (40th)	—	no fix	2020-07-15	≤ 9.1.0
CVE-2020-14594US	medium6.5	0.41% (35th)	—	no fix	2020-07-15	≤ 9.1.0
CVE-2020-14753US	low1.9	0.39% (33rd)	—	no fix	2020-10-21	≤ 9.1.0

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-284Improper Access Control6 CVEs
CWE-264CWE-2644 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-707Improper Neutralization1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.