Unauthenticated Network Vulnerability in Oracle CRM Technical Foundation of Oracle E-Business Suite

CVE-2020-2652

Summary

An unauthenticated network vulnerability has been identified in Oracle CRM Technical Foundation, a component of Oracle E-Business Suite. The issue affects versions 12.1.3 and 12.2.3 to 12.2.9, allowing attackers with network access via HTTPS to potentially compromise the system. Exploitation requires human interaction from an individual other than the attacker. This vulnerability poses significant risks as it can lead to unauthorized access to critical data and provide attackers with the ability to modify, insert, or delete accessible data within Oracle CRM Technical Foundation. Notably, despite being localized within CRM Technical Foundation, the impact may extend to additional products within the suite, making it a serious concern for organizations utilizing these applications.

References