Vulnerability in Oracle Enterprise Manager Base Platform Application Service Level Management

CVE-2020-2636

Summary

An access control vulnerability exists in Oracle Enterprise Manager Base Platform within the Application Service Level Management component. This vulnerability allows high-privilege attackers with network access via HTTP to compromise the platform. Exploitation could lead to unauthorized access to sensitive data, granting the attacker extensive privileges to manipulate data, including updates, inserts, or deletions. In addition, the vulnerability poses a risk of partial denial of service, impacting the overall availability of affected services.

References