Unauthenticated Access Vulnerability in Oracle iSupport Product by Oracle

CVE-2020-2665

What is CVE-2020-2665?

The vulnerability in Oracle iSupport within the Oracle E-Business Suite allows an unauthenticated attacker with network access over HTTPS to compromise the affected system. Successful exploitation could lead to unauthorized access to sensitive data and potentially allow an attacker to manipulate that data through unauthorized updates, inserts, or deletions. This vulnerability hinges on human interaction, enabling attackers to execute their plans effectively. Additionally, while the vulnerability is confined to Oracle iSupport, the ramifications can extend to other integrated products, posing a significant security risk.

References