Unauthorized Access Vulnerability in Oracle Banking Payments by Oracle

CVE-2020-2710

What is CVE-2020-2710?

A vulnerability exists in the Oracle Banking Payments component of Oracle Financial Services Applications, which allows an attacker with low privileges and network access to exploit the system via HTTP. Successful exploitation can lead to unauthorized modifications, including updates, inserts, or deletions of accessible data, as well as unauthorized reading of certain sensitive information within Oracle Banking Payments. This issue affects versions 14.1.0 through 14.3.0 and highlights the need for heightened security measures.

References