CVE-2019-2403

CVE-2019-2403 is a medium-severity vulnerability affecting Oracle Hospitality Simphony version 2.10. This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized modification, insertion, or deletion of some accessible data, as well as unauthorized read access to a subset of data. While the CVSS 3.0 base score is 6.5, indicating confidentiality and integrity impacts, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.