Oracle Database Server Vulnerability in Applications DBA Component

CVE-2020-2568

Summary

The vulnerability in the Oracle Applications DBA component of Oracle Database Server allows an attacker with local logon privileges to exploit the system. Affected versions 12.1.0.2, 12.2.0.1, 18c, and 19c can be compromised if the attacker has access to the infrastructure where Oracle Applications DBA operates. Successful exploitation can lead to unauthorized updates, insertions, or deletions of data, as well as potential partial denial of service. Human interaction from a third party is required for successful attacks, emphasizing the need for vigilance in access control.

References