Uncontrolled Access Vulnerability in Oracle Advanced Outbound Telephony Product by Oracle

CVE-2020-14670

Summary

An access control vulnerability exists in Oracle Advanced Outbound Telephony, a component of Oracle E-Business Suite, impacting versions 12.1.1 through 12.1.3 and 12.2.3 through 12.2.9. This weakness allows unauthenticated attackers with network access through HTTP to compromise the system, necessitating interaction from an unsuspecting user for successful exploitation. Consequently, this vulnerability may lead to unauthorized access to sensitive data and the potential for unauthorized operations such as insertions, deletions, or updates to data stored in Oracle Advanced Outbound Telephony. The overall impact could extend to other components of Oracle E-Business Suite.

References