Vulnerability in Oracle WebCenter Sites Product by Oracle

CVE-2020-2538

Summary

A vulnerability exists in Oracle WebCenter Sites, part of Oracle Fusion Middleware, allowing unauthenticated attackers with network access via HTTP to compromise the system. This flaw can give unauthorized users the ability to perform unauthorized updates, inserts, or deletions to accessible data. Although it primarily affects Oracle WebCenter Sites, successful exploitation can have broader implications on other connected products. The exploit requires human interaction from individuals other than the attacker, potentially leading to unauthorized read access to a subset of data and the ability to cause a partial denial of service. This vulnerability emphasizes the importance of maintaining strict access controls and applying security updates promptly.

References