File Upload Vulnerability in Oracle Communications Applications

CVE-2020-14630

Summary

A security flaw exists within the Oracle Enterprise Session Border Controller allowing an attacker with high privileges and network access via HTTP to exploit the system. This vulnerability can lead to unauthorized access and manipulation of data, as well as the potential for denial of service, causing the system to crash or hang. Successful exploitation requires interaction from a separate user, underscoring the necessity for vigilance against social engineering threats. The flaw affects multiple supported versions of the product, posing significant risks not only to the affected system but also to associated products.

References