Command Line Interface Vulnerability in Oracle's Enterprise Manager Base Platform

CVE-2020-2646

Summary

A low-privileged attacker with network access can exploit a vulnerability in the Command Line Interface of Oracle's Enterprise Manager Base Platform. This exploitation requires human interaction from a third party, highlighting the importance of user awareness. Although the flaw resides in the Enterprise Manager Base Platform, successful attacks can compromise data across other connected products. Affected versions 12.1.0.5, 13.2.0.0, and 13.3.0.0 could allow unauthorized users to update, insert, or delete crucial data as well as access sensitive information without permission.

References