File Upload Vulnerability in Oracle Financial Services Applications

CVE-2020-2730

Summary

A vulnerability exists in the Oracle Financial Services Revenue Management and Billing product that allows low-privileged attackers with network access via HTTP to compromise the system. This file upload vulnerability requires human interaction from an individual other than the attacker for exploitation. Although it primarily affects the Revenue Management and Billing component, successful attacks can lead to unauthorized updates, deletions, or insertions of accessible data. Additionally, the vulnerability may grant unauthorized read access to certain data subsets, which could affect other linked Oracle applications.

References