HTTP Exploitable Vulnerability in Oracle Enterprise Manager Base Platform

CVE-2020-2633

Summary

A vulnerability exists within Oracle's Enterprise Manager Base Platform that could be exploited by a high privileged attacker with network access via HTTP. Successful exploitation of this vulnerability allows the attacker to gain unauthorized access to sensitive data, manipulate critical data by performing unauthorized updates or deletions, and can even lead to a partial denial of service. The affected versions include 12.1.0.5, 13.2.0.0, and 13.3.0.0, emphasizing the necessity for users to implement security measures to mitigate potential risks.

References