Unauthenticated Data Access Vulnerability in Oracle E-Business Suite Scripting

CVE-2020-2817

What is CVE-2020-2817?

The vulnerability in Oracle E-Business Suite's Scripting component exposes systems to significant risks. An unauthenticated attacker with HTTP access can exploit this weakness, potentially gaining unauthorized entry to critical data. Exploitation requires user interaction from an unwitting individual, which raises concerns about social engineering attacks. Although primarily affecting Oracle Scripting, the consequences of successful exploitation may extend to other dependent applications, allowing for unauthorized modifications, deletions, or insertions of sensitive data, hence jeopardizing overall data integrity.

References