CVE-2019-2407

CVE-2019-2407 is a vulnerability in Oracle Hospitality Reporting and Analytics, specifically version 9.1.0. A low-privileged attacker with report privileges and infrastructure logon can exploit this to gain unauthorized access to critical data, including full read access and partial write access. The CVSS 3.0 Base Score is 6.1 (Medium), indicating a local attack vector with low complexity, leading to high confidentiality and low integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.