Vulnerability in Oracle E-Business Intelligence exposes sensitive data

CVE-2020-2840

Summary

A vulnerability in Oracle E-Business Intelligence allows an unauthenticated attacker to exploit the system through network access. This vulnerability requires human interaction from a person other than the attacker for successful exploitation. An attacker can compromise Oracle E-Business Intelligence, potentially resulting in unauthorized access to sensitive information and granting the ability to perform unauthorized updates, insertions, or deletions on critical data. The implications of this vulnerability extend beyond Oracle E-Business Intelligence, potentially affecting other connected products.

References