Oracle Hospitality Reporting and Analytics Vulnerability in Food and Beverage Applications

CVE-2019-2425

Summary

A vulnerability exists in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications, specifically impacting version 9.1.0. This easily exploitable flaw allows unauthenticated attackers with network access through HTTP to potentially compromise the application. An attacker could leverage this vulnerability to gain unauthorized add, update, or delete access to some data stored within the Oracle Hospitality Reporting and Analytics system, as well as permit unauthorized reading of certain accessible data. This could lead to significant data integrity and confidentiality concerns for organizations utilizing these applications.

References