Vulnerability in Oracle E-Business Suite Affecting Web Applications Desktop Integrator

CVE-2020-2591

What is CVE-2020-2591?

This vulnerability in the Oracle Web Applications Desktop Integrator allows an unauthenticated attacker to exploit the system via HTTPS. Successful exploitation requires human interaction from another individual, potentially leading to unauthorized access to sensitive data. The impact of this vulnerability extends beyond the Web Applications Desktop Integrator itself, posing risks to additional components within the Oracle E-Business Suite. Attackers may gain full access to all data accessible through this interface, enabling unauthorized modifications such as updates, insertions, or deletions of critical information.

References