Security Vulnerability in Oracle Enterprise Manager Connector Framework

CVE-2020-2624

What is CVE-2020-2624?

A vulnerability exists within the Connector Framework of Oracle's Enterprise Manager Base Platform, allowing a high-privileged attacker with network access via HTTP to compromise the platform. Successful exploitation may result in unauthorized access to sensitive data and manipulation capabilities, including unauthorized updates, inserts, or deletions of accessible data. Additionally, it can lead to a partial denial of service, potentially impacting the availability of the Enterprise Manager services.

References