Unauthenticated Network Access Flaw in Oracle E-Business Suite CRM

CVE-2020-2651

Summary

An unauthenticated network access vulnerability exists in Oracle CRM Technical Foundation, part of Oracle E-Business Suite. This issue affects versions 12.1.3 and 12.2.3 through 12.2.9, allowing remote attackers with network access via HTTPS to exploit the vulnerability. Successful exploitation can lead to unauthorized access to sensitive data within Oracle CRM Technical Foundation. It requires human interaction from a user other than the attacker. While primarily affecting the CRM Technical Foundation, this vulnerability may also impact other integrated Oracle products, potentially resulting in unauthorized data manipulation, including updates, inserts, and deletions.

References