CVE-2019-2409 is a vulnerability in Oracle Hospitality Cruise Shipboard Property Management System (SPMS) version 8.0.8. A low-privileged attacker with infrastructure logon can exploit this vulnerability, requiring human interaction from a non-attacker. Successful attacks can lead to a complete denial of service, unauthorized data modification (update, insert, delete), and unauthorized read access to a subset of data within the affected system. The vulnerability has a CVSS 3.0 Base Score of 7.3 (Medium), indicating impacts on confidentiality, integrity, and availability. The attack vector is local, with low attack complexity and low privileges required, but it requires user interaction. While the vulnerability is in SPMS, attacks may significantly impact additional products. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.0.8CPE matchmatch criteria | cpe:2.3:a:oracle:hospitality_cruise_shipboard_property_management_system:8.0.8:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.