Exploitable Vulnerability in Oracle iLearning Assessment Manager

CVE-2020-14595

What is CVE-2020-14595?

An easily exploitable vulnerability exists within the Oracle iLearning product's Assessment Manager component, affecting versions 6.1 and 6.1.1. An unauthenticated attacker with network access via HTTP could compromise Oracle iLearning, potentially leading to unauthorized access to critical data. Successful exploitation could grant attackers complete access to all data accessible through Oracle iLearning and the capability to instigate a partial denial of service (DoS) scenario. It is crucial for users of affected versions to implement security measures to safeguard against these potential threats.

References