Vulnerability in Oracle Enterprise Manager's System Monitoring Component

CVE-2020-2632

Summary

A vulnerability has been identified in the Enterprise Manager Base Platform of Oracle Enterprise Manager, specifically within the System Monitoring component. This flaw can be exploited by a high-privileged attacker with network access via HTTP, allowing them to compromise the Base Platform. Successful exploitation may lead to unauthorized access to sensitive data, including the ability to update, insert, or delete records. Furthermore, attackers may initiate a partial denial of service, impacting the functionality of the Enterprise Manager Base Platform. Organizations using affected versions should prioritize applying patches and monitor their environments for any suspicious activity.

References