Unauthenticated Access Vulnerability in Oracle iSupport by Oracle

CVE-2020-2661

What is CVE-2020-2661?

The vulnerability in Oracle iSupport allows an unauthenticated attacker with network access via HTTPS to compromise the system. While it primarily affects Oracle iSupport, successful exploitation can lead to unauthorized access to sensitive data and may allow for unauthorized modification, including updates and deletions. Notably, these attacks require human interaction from a user other than the attacker, making the vulnerability exploitable under specific conditions. This could significantly impact data integrity across additional Oracle products linked to iSupport, exposing organizations to the risk of critical data loss.

References