CVE-2019-2952

CVE-2019-2952 describes an easily exploitable vulnerability within the Oracle Hospitality Reporting and Analytics component (version 9.1.0) of Oracle Food and Beverage Applications. An unauthenticated attacker with network access via HTTP can compromise the system, requiring human interaction from a non-attacker to succeed. Successful exploitation can lead to unauthorized read, update, insert, or delete access to a subset of the affected data, potentially impacting additional products. With a CVSS 3.0 Base Score of 6.1 (Medium), this vulnerability has low confidentiality and integrity impacts. The attack vector is network-based with low attack complexity, but user interaction is required. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.