Unauthorized Access Vulnerability in Oracle iSupport of Oracle E-Business Suite

CVE-2020-2667

What is CVE-2020-2667?

A vulnerability exists in Oracle iSupport, part of Oracle E-Business Suite, which can be exploited by unauthenticated attackers with network access via HTTPS. Successful exploitation requires human interaction from a party other than the attacker. While primarily affecting Oracle iSupport, the impact can extend to other products within the suite. This vulnerability may enable unauthorized updates, inserts, or deletions of accessible data, posing a risk to the integrity of the system.

References