Unauthorized Data Access in Oracle Demantra Demand Management by Oracle

CVE-2020-2557

What is CVE-2020-2557?

A security flaw exists in Oracle Demantra Demand Management that can be exploited by unauthenticated attackers with network access through HTTP. This vulnerability allows unauthorized updates, inserts, or deletions to accessible data within the product. While attacks require human interaction from another user, the implications can extend beyond Demantra, potentially affecting associated systems and data.

References