Oracle Corp. Oracle Hospitality Simphony

Name: Oracle Corp. Oracle Hospitality Simphony
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical0high2medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	3 versions
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	3 versions
CVE-2018-1285US	critical9.8	17.8% (97th)	Exploit	no fix	2020-05-11	2 versions
CVE-2024-21014US	—OT elevated	0.84% (58th)	—	no fix	2024-04-16	19.1.0 → 19.5.4
CVE-2024-20997US	—	0.83% (57th)	—	no fix	2024-04-16	19.1.0 → 19.5.4
CVE-2024-21010US	—OT elevated	0.73% (54th)	—	no fix	2024-04-16	19.1.0 → 19.5.4
CVE-2025-30686US	—	0.62% (49th)	—	no fix	2025-04-15	19.1 → 19.7
CVE-2024-20989US	—	0.52% (44th)	—	no fix	2024-04-16	19.1.0 → 19.5.4
CVE-2026-60168US	—	0.45% (39th)	—	no fix	2026-07-21	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-284Improper Access Control1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.