Vulnerability in Oracle Knowledge's Information Manager Console
CVE-2020-2795

6.3MEDIUM

Key Information:

Vendor
Oracle
Status
Knowledge
Vendor
CVE Published:
15 April 2020

Summary

This vulnerability exists in the Oracle Knowledge product's Information Manager Console, affecting versions 8.6.0 through 8.6.2. It allows an attacker with high privileges to exploit the system if they have access to the infrastructure where Oracle Knowledge runs. Notably, successful exploitation necessitates human interaction by someone other than the attacker, which heightens the risk of unauthorized access and potential takeover of the Oracle Knowledge system.

Affected Version(s)

Knowledge 8.6.0-8.6.2

References

https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.