CVE-2019-2407
First published: Wed Jan 16 2019(Updated: )
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Credit: secalert_us@oracle.com secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality Reporting and Analytics | =9.1.0 | |
| =9.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-2407.
Which component of Oracle is affected by this vulnerability?
This vulnerability affects the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.
What version of Oracle is affected by this vulnerability?
The supported version 9.1.0 of Oracle Hospitality Reporting and Analytics is affected.
What privilege does an attacker need to exploit this vulnerability?
An attacker with the low privileged Report privilege and logon access to the infrastructure can exploit this vulnerability.
What is the severity of CVE-2019-2407?
The severity of CVE-2019-2407 is medium with a CVSS score of 6.1.
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- agent/severity
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- agent/source
- vendor/oracle
- canonical/oracle hospitality reporting and analytics
- version/oracle hospitality reporting and analytics/9.1.0