Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-2346 State: PUBLISHED Published: 2019-07-25T16:33:19 Last Updated: 2024-08-04T18:49:47.489Z Vendors: Qualcomm, Inc. Products: Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Improper Validation of Array Index in WLAN Description: Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS40
agon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2019-2347 State: REJECTED Published: 2021-12-20T22:44:30 Last Updated: 2021-12-20T22:44:30 Description: No description available.
CVE ID: CVE-2019-2348 State: REJECTED Published: 2021-12-20T22:44:30 Last Updated: 2021-12-20T22:44:30 Description: No description available.
CVE ID: CVE-2019-2349 State: REJECTED Published: 2021-12-20T22:44:31 Last Updated: 2021-12-20T22:44:31 Description: No description available.
CVE ID: CVE-2019-2350 State: REJECTED Published: 2021-12-20T22:44:32 Last Updated: 2021-12-20T22:44:32 Description: No description available.
CVE ID: CVE-2019-2351 State: REJECTED Published: 2021-12-20T22:44:33 Last Updated: 2021-12-20T22:44:33 Description: No description available.
CVE ID: CVE-2019-2352 State: REJECTED Published: 2021-12-20T22:44:33 Last Updated: 2021-12-20T22:44:33 Description: No description available.
CVE ID: CVE-2019-2353 State: REJECTED Published: 2021-12-20T22:44:34 Last Updated: 2021-12-20T22:44:34 Description: No description available.
CVE ID: CVE-2019-2354 State: REJECTED Published: 2021-12-20T22:44:35 Last Updated: 2021-12-20T22:44:35 Description: No description available.
CVE ID: CVE-2019-2355 State: REJECTED Published: 2021-12-20T22:44:36 Last Updated: 2021-12-20T22:44:36 Description: No description available.
CVE ID: CVE-2019-2356 State: REJECTED Published: 2021-12-20T22:44:36 Last Updated: 2021-12-20T22:44:36 Description: No description available.
CVE ID: CVE-2019-2357 State: REJECTED Published: 2021-12-20T22:44:37 Last Updated: 2021-12-20T22:44:37 Description: No description available.
CVE ID: CVE-2019-2358 State: REJECTED Published: 2021-12-20T22:44:38 Last Updated: 2021-12-20T22:44:38 Description: No description available.
CVE ID: CVE-2019-2359 State: REJECTED Published: 2021-12-20T22:44:39 Last Updated: 2021-12-20T22:44:39 Description: No description available.
CVE ID: CVE-2019-2360 State: REJECTED Published: 2021-12-20T22:44:39 Last Updated: 2021-12-20T22:44:39 Description: No description available.
CVE ID: CVE-2019-2361 State: REJECTED Published: 2021-12-20T22:44:40 Last Updated: 2021-12-20T22:44:40 Description: No description available.
CVE ID: CVE-2019-2362 State: REJECTED Published: 2021-12-20T22:44:41 Last Updated: 2021-12-20T22:44:41 Description: No description available.
CVE ID: CVE-2019-2363 State: REJECTED Published: 2021-12-20T22:44:41 Last Updated: 2021-12-20T22:44:41 Description: No description available.
CVE ID: CVE-2019-2364 State: REJECTED Published: 2021-12-20T22:44:42 Last Updated: 2021-12-20T22:44:42 Description: No description available.
CVE ID: CVE-2019-2365 State: REJECTED Published: 2021-12-20T22:44:43 Last Updated: 2021-12-20T22:44:43 Description: No description available.
CVE ID: CVE-2019-2366 State: REJECTED Published: 2021-12-20T22:44:44 Last Updated: 2021-12-20T22:44:44 Description: No description available.
CVE ID: CVE-2019-2367 State: REJECTED Published: 2021-12-20T22:44:44 Last Updated: 2021-12-20T22:44:44 Description: No description available.
CVE ID: CVE-2019-2368 State: REJECTED Published: 2021-12-20T22:44:45 Last Updated: 2021-12-20T22:44:45 Description: No description available.
CVE ID: CVE-2019-2369 State: REJECTED Published: 2021-12-20T22:44:46 Last Updated: 2021-12-20T22:44:46 Description: No description available.
CVE ID: CVE-2019-2370 State: REJECTED Published: 2021-12-20T22:44:47 Last Updated: 2021-12-20T22:44:47 Description: No description available.
CVE ID: CVE-2019-2371 State: REJECTED Published: 2021-12-20T22:44:47 Last Updated: 2021-12-20T22:44:47 Description: No description available.
CVE ID: CVE-2019-2372 State: REJECTED Published: 2021-12-20T22:44:48 Last Updated: 2021-12-20T22:44:48 Description: No description available.
CVE ID: CVE-2019-2373 State: REJECTED Published: 2021-12-20T22:44:49 Last Updated: 2021-12-20T22:44:49 Description: No description available.
CVE ID: CVE-2019-2374 State: REJECTED Published: 2021-12-20T22:44:50 Last Updated: 2021-12-20T22:44:50 Description: No description available.
CVE ID: CVE-2019-2375 State: REJECTED Published: 2021-12-20T22:44:50 Last Updated: 2021-12-20T22:44:50 Description: No description available.
CVE ID: CVE-2019-2376 State: REJECTED Published: 2021-12-20T22:44:51 Last Updated: 2021-12-20T22:44:51 Description: No description available.
CVE ID: CVE-2019-2377 State: REJECTED Published: 2021-12-20T22:44:52 Last Updated: 2021-12-20T22:44:52 Description: No description available.
CVE ID: CVE-2019-2378 State: REJECTED Published: 2021-12-20T22:44:53 Last Updated: 2021-12-20T22:44:53 Description: No description available.
CVE ID: CVE-2019-2379 State: REJECTED Published: 2021-12-20T22:44:53 Last Updated: 2021-12-20T22:44:53 Description: No description available.
CVE ID: CVE-2019-2380 State: REJECTED Published: 2021-12-20T22:44:54 Last Updated: 2021-12-20T22:44:54 Description: No description available.
CVE ID: CVE-2019-2381 State: REJECTED Published: 2021-12-20T22:44:55 Last Updated: 2021-12-20T22:44:55 Description: No description available.
CVE ID: CVE-2019-2382 State: REJECTED Published: 2021-12-20T22:44:55 Last Updated: 2021-12-20T22:44:55 Description: No description available.
CVE ID: CVE-2019-2383 State: REJECTED Published: 2021-12-20T22:44:56 Last Updated: 2021-12-20T22:44:56 Description: No description available.
CVE ID: CVE-2019-2384 State: REJECTED Published: 2021-12-20T22:44:57 Last Updated: 2021-12-20T22:44:57 Description: No description available.
CVE ID: CVE-2019-2386 State: PUBLISHED Published: 2019-08-06T18:32:07 Last Updated: 2024-08-04T18:49:46.349Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-285 Description: After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects MongoDB Server v4.0 versions prior to 4.0.9; MongoDB Server v3.6 versions prior to 3.6.13 and MongoDB Server v3.4 versions prior to 3.4.22. Workaround: After deleting one or more users, r
rsions prior to 3.6.13 and MongoDB Server v3.4 versions prior to 3.4.22. Workaround: After deleting one or more users, restart any nodes which may have had active user authorization sessions. Refrain from creating user accounts with the same name as previously deleted accounts. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-38984 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0829
CVE ID: CVE-2019-2388 State: PUBLISHED Published: 2020-05-13T16:15:13 Last Updated: 2024-08-04T18:49:46.370Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: MongoDB Inc. Products: MongoDB Ops Manager Problem Types: CWE-425 Description: In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access log of a publicly exposed Ops Manager instance. This issue affects: MongoDB Inc. MongoDB Ops Manager 4.0 versions 4.0.9, 4.0.10 and MongoDB Ops Manager 4.1 version 4.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mongodb.com/docs/ops-manager/current/release-notes/application/
otes: - CVE Program Container: References: - https://www.mongodb.com/docs/ops-manager/current/release-notes/application/#onprem-server-4.0.11
CVE ID: CVE-2019-2389 State: PUBLISHED Published: 2019-08-30T14:41:23 Last Updated: 2024-08-04T18:49:47.655Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-732 Description: Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22. Additional Analyst Notes: - CVE Program Container:
rsions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-40563
CVE ID: CVE-2019-2390 State: PUBLISHED Published: 2019-08-30T14:41:19 Last Updated: 2024-08-04T18:49:47.495Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-94 Description: An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. This issue MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14 and MongoDB Server v3.4 prior to 3.4.22. Additional Analyst Notes: - CVE Program Container: Reference
ns prior to 3.6.14 and MongoDB Server v3.4 prior to 3.4.22. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-42233
CVE ID: CVE-2019-2391 State: PUBLISHED Published: 2020-03-31T13:25:12 Last Updated: 2024-08-04T18:49:47.919Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: MongoDB Inc. Products: js-bson Problem Types: CWE-502 Description: Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure. This issue affects: MongoDB Inc. js-bson library version 1.1.3 and prior to. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mongodb/js-bson/releases/tag/v1.1.4
CVE ID: CVE-2019-2392 State: PUBLISHED Published: 2020-11-23T15:25:14.217069Z Last Updated: 2024-09-16T17:58:46.495Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-190 Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.
0; v3.6 versions prior to 3.6.20. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-43699
CVE ID: CVE-2019-2393 State: PUBLISHED Published: 2020-11-23T15:30:24.790968Z Last Updated: 2024-09-16T22:40:38.672Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-416 Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-43350
CVE ID: CVE-2019-2395 State: PUBLISHED Published: 2019-01-16T19:00:00 Last Updated: 2024-10-02T16:24:49.260Z Vendors: Oracle Corporation Products: WebLogic Server Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. Description: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version t
Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 5.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - C
ts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106585 - http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
CVE ID: CVE-2019-2396 State: PUBLISHED Published: 2019-01-16T19:00:00 Last Updated: 2024-10-02T16:24:37.845Z Vendors: Oracle Corporation Products: CRM Technical Foundation Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. Descript
ult in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. Description: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful att
ulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106620 - http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
CVE ID: CVE-2019-2397 State: PUBLISHED Published: 2019-01-16T19:00:00 Last Updated: 2024-10-02T16:24:28.982Z Vendors: Oracle Corporation Products: Hospitality Reporting and Analytics Problem Types: Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics a
nalytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. Description: Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analy
lnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized read access to a subset of Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.securityfocus.com/bid/106576
CVE ID: CVE-2019-2398 State: PUBLISHED Published: 2019-01-16T19:00:00 Last Updated: 2024-10-02T16:24:20.036Z Vendors: Oracle Corporation Products: WebLogic Server Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. Description: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allo
oyment). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106617 - http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
CVE ID: CVE-2019-2399 State: PUBLISHED Published: 2019-01-16T19:00:00 Last Updated: 2024-10-02T16:24:07.634Z Vendors: Oracle Corporation Products: Communications Diameter Signaling Router (DSR) Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router (DSR). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Diameter Signaling Router (DSR) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Diameter Signaling Router (DSR). Description: Vulnerability in
denial of service (partial DOS) of Oracle Communications Diameter Signaling Router (DSR). Description: Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle Communications Applications (subcomponent: Security). The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Diameter Signaling Router (DSR). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Diameter Signaling Router (DSR) accessible data and unauthorized ability to cause a partial denial of service (
ications Diameter Signaling Router (DSR) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Diameter Signaling Router (DSR). CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106580 - http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
CVE ID: CVE-2019-2400 State: PUBLISHED Published: 2019-01-16T19:00:00 Last Updated: 2024-10-02T16:23:52.703Z Vendors: Oracle Corporation Products: iStore Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle
e access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. Description: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful
acker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106620 - http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
CVE ID: CVE-2019-2401 State: PUBLISHED Published: 2019-01-16T19:00:00 Last Updated: 2024-10-02T16:23:37.356Z Vendors: Oracle Corporation Products: Hospitality Reporting and Analytics Problem Types: Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. D