Unauthenticated Network Vulnerability in Oracle Hospitality Gift and Loyalty

CVE-2019-2763

What is CVE-2019-2763?

A vulnerability exists within the Oracle Hospitality Gift and Loyalty component of Oracle's Food and Beverage Applications that permits unauthenticated attackers to exploit network access via HTTP. This flaw affects versions 9.0.0 and 9.1.0, enabling an attacker to gain unauthorized access to sensitive data, as well as potentially allowing them to perform unauthorized updates, inserts, or deletions of data within the system. Attackers can exploit this vulnerability to compromise the confidentiality and integrity of the data managed by the Gift and Loyalty system.

References