Unauthenticated Access Flaw in Oracle E-Business Intelligence Suite

CVE-2020-2808

What is CVE-2020-2808?

An access vulnerability in Oracle E-Business Intelligence allows an unauthenticated attacker with network access to potentially compromise the system. Although exploitation requires human interaction from a third party, the consequences can include unauthorized access to sensitive data and various forms of data manipulation, such as updates, inserts, or deletions. This issue primarily affects versions 12.1.1 to 12.1.3 of Oracle E-Business Intelligence but can also impact other products in the suite, highlighting the importance of a robust security posture.

References