Oracle CRM Technical Foundation Security Flaw Exposing Sensitive Data

CVE-2020-14657

Summary

A vulnerability exists in the Oracle CRM Technical Foundation component of Oracle E-Business Suite, specifically within the Preferences feature. This security flaw allows a low-privileged attacker with network access via HTTP to exploit the system, necessitating human interaction from a user other than the attacker. Although primarily affecting Oracle CRM Technical Foundation, the ramifications of successful exploitation could extend to additional products within the suite. This could lead to unauthorized access to sensitive data or complete control over all data accessible within the Oracle CRM Technical Foundation, along with the potential for unauthorized updates, insertions, or deletions of critical information.

References