Vulnerability in Oracle Food and Beverage Applications Reporting and Analytics

CVE-2019-2401

Summary

A vulnerability exists in the Oracle Hospitality Reporting and Analytics component within Oracle's Food and Beverage Applications, specifically affecting version 9.1.0. This flaw can be exploited by low privileged attackers with Admin privileges and network access through HTTP, allowing them to compromise the system. Successful exploitation of this vulnerability can result in unauthorized creation, deletion, or modification of critical data, providing attackers with potential access to all data within the Reporting and Analytics module.

References