Unauthenticated Access Vulnerability in Oracle E-Business Suite's Application Object Library

CVE-2020-14840

Summary

An unauthenticated access vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite, allowing an attacker with network access via HTTP to exploit the system. This vulnerability affects supported versions 12.1.3 and versions 12.2.3 through 12.2.10. While an attack requires human interaction from a person other than the attacker, it poses a significant risk as it could lead to unauthorized updates, insertions, or deletions of accessible data within Oracle Application Object Library. Attackers can exploit this vulnerability to impact other products relying on the affected component, leading to broader security implications.

References