<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">CVE-2017-10195</DocumentTitle>
  <DocumentType>SUSE CVE</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE CVE-2017-10195</ID>
    </Identification>
    <Status>Interim</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>12</Number>
        <Date>2023-02-02T01:59:49Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-05-30T13:57:59Z</InitialReleaseDate>
    <CurrentReleaseDate>2023-02-02T01:59:49Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf-cve.pl</Engine>
      <Date>2020-12-27T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="CVE" Type="Summary" Ordinal="1" xml:lang="en">CVE-2017-10195</Note>
    <Note Title="Mitre CVE Description" Type="Description" Ordinal="2" xml:lang="en">Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="4" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE CaaS Platform 4.0">
      <Branch Type="Product Name" Name="SUSE CaaS Platform 4.0">
        <FullProductName ProductID="SUSE CaaS Platform 4.0" CPE="cpe:/o:suse:caasp:4.0">SUSE CaaS Platform 4.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 6">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 6">
        <FullProductName ProductID="SUSE Enterprise Storage 6" CPE="cpe:/o:suse:ses:6">SUSE Enterprise Storage 6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp1">SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15">SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP1-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp1">SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15-ESPOS" CPE="cpe:/o:suse:sle_hpc-espos:15">SUSE Linux Enterprise Server 15-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS" CPE="cpe:/o:suse:sles-ltss:15">SUSE Linux Enterprise Server 15-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server Business Critical Linux 15 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server Business Critical Linux 15 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Server Business Critical Linux 15 SP1" CPE="cpe:/o:suse:sles_bcl:15:sp1">SUSE Linux Enterprise Server Business Critical Linux 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15" CPE="cpe:/o:suse:sles_sap:15">SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1" CPE="cpe:/o:suse:sles_sap:15:sp1">SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Proxy 4.0">
      <Branch Type="Product Name" Name="SUSE Manager Proxy 4.0">
        <FullProductName ProductID="SUSE Manager Proxy 4.0" CPE="cpe:/o:suse:suse-manager-proxy:4.0">SUSE Manager Proxy 4.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Retail Branch Server 4.0">
      <Branch Type="Product Name" Name="SUSE Manager Retail Branch Server 4.0">
        <FullProductName ProductID="SUSE Manager Retail Branch Server 4.0" CPE="cpe:/o:suse:suse-manager-retail-branch-server:4.0">SUSE Manager Retail Branch Server 4.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Server 4.0">
      <Branch Type="Product Name" Name="SUSE Manager Server 4.0">
        <FullProductName ProductID="SUSE Manager Server 4.0" CPE="cpe:/o:suse:suse-manager-server:4.0">SUSE Manager Server 4.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox">
      <FullProductName ProductID="MozillaFirefox" CPE="cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*">MozillaFirefox</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-devel">
      <FullProductName ProductID="MozillaFirefox-devel">MozillaFirefox-devel</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-common">
      <FullProductName ProductID="MozillaFirefox-translations-common" CPE="cpe:2.3:a:mozilla:firefox:translations:*:*:*:*:*:*:*">MozillaFirefox-translations-common</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="MozillaFirefox-translations-other">
      <FullProductName ProductID="MozillaFirefox-translations-other" CPE="cpe:2.3:a:mozilla:firefox:translations:*:*:*:*:*:*:*">MozillaFirefox-translations-other</FullProductName>
    </Branch>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE CaaS Platform 4.0">
      <FullProductName ProductID="SUSE CaaS Platform 4.0:MozillaFirefox">MozillaFirefox as a component of SUSE CaaS Platform 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE CaaS Platform 4.0">
      <FullProductName ProductID="SUSE CaaS Platform 4.0:MozillaFirefox-devel">MozillaFirefox-devel as a component of SUSE CaaS Platform 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common" RelationType="Default Component Of" RelatesToProductReference="SUSE CaaS Platform 4.0">
      <FullProductName ProductID="SUSE CaaS Platform 4.0:MozillaFirefox-translations-common">MozillaFirefox-translations-common as a component of SUSE CaaS Platform 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other" RelationType="Default Component Of" RelatesToProductReference="SUSE CaaS Platform 4.0">
      <FullProductName ProductID="SUSE CaaS Platform 4.0:MozillaFirefox-translations-other">MozillaFirefox-translations-other as a component of SUSE CaaS Platform 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:MozillaFirefox">MozillaFirefox as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel">MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common">MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other">MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-devel">MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-common">MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-other">MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel">MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common">MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other">MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-ESPOS:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise Server 15-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel">MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common">MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other">MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server Business Critical Linux 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server Business Critical Linux 15 SP1:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-devel">MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-common">MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-other">MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox">MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel">MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-common" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common">MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox-translations-other" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other">MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.0">
      <FullProductName ProductID="SUSE Manager Proxy 4.0:MozillaFirefox">MozillaFirefox as a component of SUSE Manager Proxy 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.0">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.0:MozillaFirefox">MozillaFirefox as a component of SUSE Manager Retail Branch Server 4.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="MozillaFirefox" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.0">
      <FullProductName ProductID="SUSE Manager Server 4.0:MozillaFirefox">MozillaFirefox as a component of SUSE Manager Server 4.0</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). The supported version that is affected is 2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).</Note>
    </Notes>
    <CVE>CVE-2017-10195</CVE>
    <ProductStatuses>
      <Status Type="Known Not Affected">
        <ProductID>SUSE CaaS Platform 4.0:MozillaFirefox</ProductID>
        <ProductID>SUSE CaaS Platform 4.0:MozillaFirefox-devel</ProductID>
        <ProductID>SUSE CaaS Platform 4.0:MozillaFirefox-translations-common</ProductID>
        <ProductID>SUSE CaaS Platform 4.0:MozillaFirefox-translations-other</ProductID>
        <ProductID>SUSE Enterprise Storage 6:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-devel</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-common</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-other</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-ESPOS:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other</ProductID>
        <ProductID>SUSE Linux Enterprise Server Business Critical Linux 15 SP1:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-common</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-other</ProductID>
        <ProductID>SUSE Manager Proxy 4.0:MozillaFirefox</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.0:MozillaFirefox</ProductID>
        <ProductID>SUSE Manager Server 4.0:MozillaFirefox</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
  </Vulnerability>
</cvrfdoc>
