AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-2636

HIGH · CVSS 8.1 EPSS 13.73% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-01-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
External Security References

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-2636
Severity
HIGH
CVSS
8.1
EPSS
13.73%
Oracle

Original Filing — NVD Description

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Simphony. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).