Vulnerability in Oracle Enterprise Communications Broker WebGUI

CVE-2020-14722

What is CVE-2020-14722?

A vulnerability exists in the Oracle Enterprise Communications Broker's WebGUI that permits an unauthenticated attacker with network access via HTTP to exploit the system. While the attack requires human interaction from a third party, it has the potential to compromise sensitive data by allowing unauthorized updates, inserts, or deletions. Additionally, this vulnerability could enable unauthorized read access to certain data and may lead to a partial denial of service. It's crucial for organizations utilizing affected versions (3.0.0 to 3.2.0) to implement security measures to mitigate these risks.

References