Remote Code Execution Flaw in Oracle Financial Services Analytical Applications

CVE-2020-14615

Summary

A vulnerability exists in Oracle Financial Services Analytical Applications Infrastructure that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction from a user other than the attacker, escalating risks for sensitive data. This flaw could enable unauthorized updates, insertions, or deletions of accessible data, as well as unauthorized read access to a subset of information within the infrastructure. This vulnerability may also impact other products connected to the Oracle Financial Services ecosystem.

References