Oracle Food and Beverage Applications Reporting and Analytics Vulnerability
CVE-2019-2397
4.4MEDIUM
Key Information:
- Vendor
- Oracle
- Vendor
- CVE Published:
- 16 January 2019
Summary
The vulnerability in the Oracle Hospitality Reporting and Analytics component allows an attacker with minimal privileges to compromise the system. The attacker, armed with Report privileges, can access the environment where the application operates. This could lead to unauthorized modification, insertion, or deletion of accessible data, as well as unauthorized reading of sensitive information. Organizations using version 9.1.0 of this software should assess their security measures to mitigate potential exploits effectively.
Affected Version(s)
Hospitality Reporting and Analytics 9.1.0
References
CVSS V3.1
Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved