Exploitable Vulnerability in Oracle Enterprise Manager Base Platform

CVE-2020-2644

Summary

A vulnerability has been identified in the Oracle Enterprise Manager Base Platform, specifically in the Oracle Management Service component. This vulnerability can be exploited by a high-privileged attacker with network access via HTTP, potentially leading to unauthorized access to sensitive data and the ability to perform destructive actions such as updates, inserts, or deletions. Furthermore, the attacker could partially disrupt the availability of the Enterprise Manager Base Platform. This security flaw affects several supported versions, making it crucial for users to implement the latest security patches and restrictions to protect their data from malicious activities.

References