Vulnerability in SuiteCommerce Advanced by Oracle NetSuite

CVE-2020-14728

Summary

A vulnerability exists within the SuiteCommerce Advanced component of Oracle NetSuite service that allows a low-privileged attacker with network access via HTTP to exploit the system. This exploit necessitates human interaction from a person other than the attacker. Although primarily affecting SuiteCommerce Advanced, successful attacks can also have repercussions on additional associated products. The potential impact includes unauthorized update, insert, or delete access to certain data accessible within SuiteCommerce Advanced, and unauthorized read access to a subset of this data.

References