Unauthorized Access Vulnerability in Oracle E-Business Suite CRM

CVE-2020-14850

Summary

A vulnerability exists within the Oracle CRM Technical Foundation, part of the Oracle E-Business Suite, which could allow an unauthenticated attacker to gain unauthorized access to critical data. This vulnerability requires human interaction from a user apart from the attacker to be exploited. Once compromised, attackers could have full access to sensitive data and could execute unauthorized operations such as updates, insertions, or deletions of accessible data. This not only compromises the CRM system but could potentially impact additional integrated products within the suite.

References