Security Vulnerability in Oracle Transportation Management by Oracle

CVE-2020-2744

Summary

A security vulnerability has been identified in Oracle Transportation Management that allows a low privileged attacker with network access via HTTP to exploit the system. While the vulnerability primarily affects Oracle Transportation Management, successful exploitation could significantly impact additional connected products. Attackers are required to have human interaction from a user other than themselves to carry out a successful attack. The vulnerability permits unauthorized actions such as updating, inserting, or deleting access to certain data within Oracle Transportation Management, as well as unauthorized reading of a subset of that data. The potential compromise of sensitive information poses a risk to the integrity and confidentiality of the data managed by the application.

References