CVE-2019-2402

CVE-2019-2402 is a difficult-to-exploit vulnerability in Oracle Hospitality Simphony, specifically version 2.10. An unauthenticated attacker with network access via HTTP can compromise the system, leading to unauthorized data modification, creation, deletion, and access to critical or all accessible data, as well as a partial denial of service. With a CVSS 3.0 Base Score of 7.7 (HIGH), it carries significant confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or community discussion surrounding this vulnerability.