Vulnerability in Oracle Enterprise Manager Base Platform Host Management

CVE-2020-2628

What is CVE-2020-2628?

An access control vulnerability exists in the Oracle Enterprise Manager Base Platform's Host Management component, affecting multiple versions. This flaw allows an attacker with high privileges and network access via HTTP to exploit the system. Successful exploitation could lead to unauthorized access to sensitive data, allowing attackers to perform operations such as updates, inserts, or deletes on the database. Additionally, the vulnerability poses a risk for partial denial of service, impacting the availability of the Enterprise Manager Base Platform.

References