Vulnerability in Oracle Marketing Product of Oracle E-Business Suite
CVE-2020-2836

8.2HIGH

Key Information:

Vendor

Oracle
Status
Marketing
Vendor
CVE Published:
15 April 2020

What is CVE-2020-2836?

A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows unauthenticated attackers to exploit the system via HTTP. By leveraging this flaw, attackers can gain unauthorized access to sensitive data after human interaction is initiated by a victim. The exploit can lead to unauthorized updates, insertions, or deletions of accessible data within Oracle Marketing, posing significant risks to the integrity and confidentiality of the information managed by this application.

Affected Version(s)

Marketing 12.1.1-12.1.3

References

https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.