Unauthenticated Access Vulnerability in Oracle Commerce Service Center
CVE-2020-14535

7.4HIGH

Key Information:

Vendor

Oracle
Status
Commerce Platform
Vendor
CVE Published:
15 July 2020

What is CVE-2020-14535?

The vulnerability in Oracle Commerce Service Center enables an unauthenticated attacker with network access via HTTP to exploit the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, allowing attackers to gain complete access to all data within the Oracle Commerce Service Center environment. This security flaw affects versions 11.1 and 11.2, as well as those prior to 11.3.1, highlighting significant concerns for organizations relying on this platform.

Affected Version(s)

Commerce Platform 11.1

Commerce Platform 11.2

Commerce Platform < 11.3.1

References

https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISC

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.