CVE-2018-2852

Oracle Hospitality Applications – Hospitality Guest Access component (Base), affected in versions 4.2.0 and 4.2.1, contains a vulnerability that allows a low-privileged, network-accessible attacker over HTTP to read and modify data, potentially leading to unauthorized update/insert/delete and rea...