Security Flaw in Oracle E-Business Suite's iSupport Component

CVE-2020-2668

What is CVE-2020-2668?

A vulnerability exists in the iSupport component of Oracle E-Business Suite that allows unauthenticated attackers with network access via HTTPS to compromise the system. Successful exploitation of this flaw may enable unauthorized updates, inserts, or deletions of accessible data. Notably, while the vulnerability is specific to iSupport, its repercussions can extend to other integrated Oracle products, especially since attacks necessitate user interaction from individuals not involved in the attack.

References