Unauthorized Access Vulnerability in Oracle Retail Applications
CVE-2020-2650

6.5MEDIUM

Key Information:

Vendor
Oracle
Status
Retail Customer Management And Segmentation Foundation
Vendor
CVE Published:
15 January 2020

Summary

A vulnerability exists in the Oracle Retail Customer Management and Segmentation Foundation, where an unauthenticated attacker with network access can compromise the system via HTTP. This flaw permits unauthorized operations such as updates, inserts, and deletions on accessible data within the application. Additionally, it allows unauthorized read access to specific accessible data, posing significant security risks to integrity and confidentiality.

Affected Version(s)

Retail Customer Management and Segmentation Foundation 16.0

References

https://www.oracle.com/security-alerts/cpujan2020.html
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.