Unauthenticated Access Vulnerability in Oracle E-Business Suite CRM User Management Framework

CVE-2020-14716

Summary

An unauthenticated access vulnerability exists in the Oracle Common Applications component of Oracle E-Business Suite, specifically affecting versions 12.1.3 and 12.2.3 to 12.2.9. This easily exploitable vulnerability allows an attacker with network access via HTTP to compromise the system. While it primarily affects the Oracle Common Applications framework, successful exploitation could lead to unauthorized updates, inserts, or deletions of sensitive accessible data stored in those applications. Notably, the exploit requires some level of human interaction, which means that external user behavior may contribute to the successful execution of the attack.

References