SQL Injection Vulnerability in Oracle Hospitality Applications

CVE-2019-2409

Summary

A vulnerability exists in the Oracle Hospitality Cruise Shipboard Property Management System component, which could allow an attacker with low privileges to compromise the system. To exploit this vulnerability, the attacker requires access to the infrastructure where the system operates and must prompt human interaction from a third party. The exploitation may lead to unauthorized capabilities such as causing system disruptions, including Denial of Service (DOS), and gaining unauthorized access to sensitive data. This vulnerability could significantly impact not only the Cruise Shipboard Property Management System but also other connected applications within the ecosystem.

References