CVE-2019-2425 in Hospitality Reportingthông tin

Tóm tắt

Bởi MITRE

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Đặt trước

14/12/2018

Tiết lộ

16/01/2019

Kiểm duyệt

được chấp nhận

EPSS

0.01170

KEV

không

Các hoạt động

rất thấp

ngành

Hospital

Nguồn

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!