Oracle E-Business Suite Print Server Vulnerability Exposes Sensitive Data

CVE-2020-14819

What is CVE-2020-14819?

A significant vulnerability exists in the Oracle One-to-One Fulfillment component of the Oracle E-Business Suite, specifically in its Print Server functionality. This vulnerability allows unauthenticated attackers with network access via HTTP to exploit the system. Although exploitation requires human interaction from a victim, successful attacks could lead to unauthorized access to sensitive data and the ability to modify, insert, or delete data within Oracle One-to-One Fulfillment. This situation poses a substantial risk not only to Oracle One-to-One Fulfillment but potentially impacts other interconnected components in the Oracle ecosystem.

References