Vulnerability in Oracle E-Business Suite Preferences Component
CVE-2020-14659

4.7MEDIUM

Key Information:

Vendor

Oracle
Status
Crm Technical Foundation
Vendor
CVE Published:
15 July 2020

What is CVE-2020-14659?

A vulnerability exists within the Preferences component of Oracle CRM Technical Foundation in the Oracle E-Business Suite that allows unauthenticated attackers with network access via HTTP to execute unauthorized operations, such as updating, inserting, or deleting data. Exploiting this vulnerability necessitates human interaction, making it particularly concerning as it can impact other related products. If successfully exploited, attackers may gain access to sensitive information within the affected application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CRM Technical Foundation 12.1.3

CRM Technical Foundation 12.2.3-12.2.9

References

https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.