Vulnerability in Oracle Enterprise Manager for Database Affects Multiple Versions

CVE-2020-2637

What is CVE-2020-2637?

An exploitable vulnerability exists in the Oracle Enterprise Manager for Database component, specifically within the Change Manager module. This issue permits high-privileged attackers with network access via HTTP to breach the security of the Enterprise Manager. Successful exploitation can lead to unauthorized access to sensitive data and the potential for unauthorized actions such as updating, inserting, or deleting records. Additionally, this vulnerability poses a risk of causing localized denial of service, effectively impacting the availability of the service.

References