Hospitality Simphony vulnerabilities | LiveThreat CVE Feed

Product

Hospitality Simphony

by Oracle · last CVE Aug 18, 2026

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities43 In the news1 Timeline

Severity mix

Critical 6High 22Medium 15Low 0

Severity

All severities43 Critical6 High22 Medium15 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Hospitality Simphony to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-21010	9.9	1%	Apr 16	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server) Affected: 19.1.0 through 19.5.4
CVE-2024-20997	9.9	1%	Apr 16	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server) Affected: 19.1.0 through 19.5.4
CVE-2024-21014	9.8	1%	Apr 16	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server) Affected: 19.1.0 through 19.5.4
CVE-2018-1285	9.8	18%	May 11	Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files Affected: 18.2.7.2; 19.1.3
CVE-2026-60591	9.1	0%	Aug 18	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS) Affected: 19.8 through 19.8.5; 19.9 through 19.9.3; 19.10 through 19.10.1
CVE-2026-60168	9.1	0%	Jul 21	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS) Affected: 19.8 through 19.8.5; 19.9 through 19.9.3; 19.10
CVE-2018-2829	8.6	2%	Apr 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console) Affected: 2.10
CVE-2018-2608	8.6	2%	Jan 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security) Affected: 2.7
CVE-2021-2018	8.3	1%	Jan 20	Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 18.2.7.2; 19.1.3
CVE-2026-60169	8.1	0%	Jul 21	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS) Affected: 19.8 through 19.8.5; 19.9 through 19.9.3; 19.10
CVE-2018-2851	8.1	1%	Apr 19	Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console) Affected: 1.6; 1.7
CVE-2018-2833	8.1	1%	Apr 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console) Affected: 2.7; 2.8; 2.9; 2.10
CVE-2018-2636	8.1	15%	Jan 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security) Affected: 2.7; 2.8; 2.9
CVE-2019-2402	7.7	2%	Jan 16	Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications Affected: 2.10
CVE-2018-2824	7.7	1%	Apr 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console) Affected: 2.8; 2.9; 2.10
CVE-2025-30686	7.6	1%	Apr 15	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: EMC) Affected: 19.1.0 through 19.7
CVE-2017-10001	7.6	1%	Aug 8	Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Core) Affected: 1.7.1
CVE-2026-60590	7.5	0%	Aug 18	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS) Affected: 19.8 through 19.8.5; 19.9 through 19.9.3; 19.10 through 19.10.1
CVE-2026-60170	7.5	0%	Jul 21	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS) Affected: 19.8 through 19.8.5; 19.9 through 19.9.3; 19.10
CVE-2026-60167	7.5	0%	Jul 21	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS) Affected: 19.8 through 19.8.5; 19.9 through 19.9.3; 19.10
CVE-2018-2848	7.5	2%	Apr 19	Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Client Application Loader) Affected: 1.6; 1.7
CVE-2018-2683	7.5	1%	Jan 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS) Affected: 2.7; 2.8; 2.9
CVE-2018-2672	7.5	2%	Jan 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS) Affected: 2.7; 2.8; 2.9
CVE-2018-2589	7.5	2%	Jan 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Server) Affected: 2.7; 2.8; 2.9
CVE-2017-10136	7.5	2%	Aug 8	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export) Affected: 2.9
CVE-2017-10206	7.3	2%	Aug 8	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement) Affected: 2.9
CVE-2018-2978	7.1	2%	Jul 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export) Affected: 2.8; 2.9; 2.10
CVE-2024-20989	7.0	1%	Apr 16	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS) Affected: 19.1.0 through 19.5.4
CVE-2019-2403	6.5	1%	Jan 16	Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications Affected: 2.10
CVE-2018-2847	6.5	1%	Apr 19	Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations) Affected: 1.6; 1.7
CVE-2018-2619	6.5	1%	Jan 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security) Affected: 2.7
CVE-2017-10344	6.5	1%	Oct 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export) Affected: 2.8; 2.9
CVE-2017-10343	6.5	2%	Oct 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export) Affected: 2.8; 2.9
CVE-2020-11022	6.1	99%	Apr 29	In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 19.1.0 through 19.1.2; 18.1; 18.2; 18.1; 18.2; 19.1.0-19.1.2
CVE-2018-2673	5.9	1%	Jan 18	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS) Affected: 2.7; 2.8; 2.9
CVE-2018-2853	5.4	1%	Apr 19	Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Client Application Loader) Affected: 1.6; 1.7
CVE-2018-2802	5.4	1%	Apr 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Client Application Loader) Affected: 2.8; 2.9
CVE-2017-10425	5.4	1%	Oct 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Service Host) Affected: 2.6; 2.7; 2.8; 2.9
CVE-2017-10367	5.4	1%	Oct 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement) Affected: 2.8; 2.9
CVE-2017-10340	5.4	1%	Oct 19	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export) Affected: 2.8; 2.9
CVE-2017-10207	5.3	3%	Aug 8	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Utilities) Affected: 2.9
CVE-2017-10205	4.3	1%	Aug 8	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console) Affected: 2.9
CVE-2017-10195	4.3	2%	Aug 8	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export) Affected: 2.8