Security Flaw in Oracle E-Business Suite's iSupport Component

CVE-2020-14686

Summary

A vulnerability exists within the iSupport component of Oracle E-Business Suite that permits unauthenticated attackers with network access via HTTP to exploit the tool. Successful exploitation demands human interaction from a third party, yet the ramifications of such an attack can lead to unauthorized access to critical information, offering attackers complete control over the data available through Oracle iSupport. This vulnerability poses significant risks, enabling attackers to perform unauthorized updates, inserts, or deletions on sensitive data accessible through the application.

References