Hospitality Simphony vulnerabilities

9 known vulnerabilities in Hospitality Simphony from Oracle. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Oracle Hospitality Simphony: Missing Authentication for Critical Functionality

  CVE-2026-60591Aug 18, 2026Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated att

• 7.5 High severity

  Oracle Hospitality Simphony: Improper Access Control

  CVE-2026-60590Aug 18, 2026Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated att

• 7.5 High severity

  Oracle Hospitality Simphony: Improper Access Control

  CVE-2026-60170Jul 21, 2026Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable vulnerability allows unauthenticated attacker wi

• 8.1 High severity

  Oracle Hospitality Simphony: Missing Authentication for Critical Functionality

  CVE-2026-60169Jul 21, 2026Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Difficult to exploit vulnerability allows unauthenticated attacker

• 9.1 Critical severity

  Oracle Hospitality Simphony: Improper Access Control

  CVE-2026-60168Jul 21, 2026Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable vulnerability allows unauthenticated attacker wi

• 7.5 High severity

  Oracle Hospitality Simphony: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60167Jul 21, 2026Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10. Easily exploitable vulnerability allows unauthenticated attacker wi

• 7.6 High severity

  Oracle Hospitality Simphony: Exposure of Sensitive System Information to an Unauthorized Control Sphere

  CVE-2025-30686Apr 15, 2025Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: EMC). Supported versions that are affected are 19.1-19.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 9.8 Critical severity

  Hospitality Simphony: Missing Authentication for Critical Functionality

  CVE-2024-21014Apr 16, 2024Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows unauthenticated attacker

• 9.9 Critical severity

  Hospitality Simphony: Incorrect Authorization

  CVE-2024-21010Apr 16, 2024Oracle

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows low privileged attacker w