Unauthenticated Remote Access Vulnerability in Oracle Depot Repair

CVE-2020-2846

Summary

The vulnerability in Oracle Depot Repair can be exploited by an unauthenticated attacker, allowing network access through HTTP. Successful exploitation necessitates human interaction from a third party, which may lead to unauthorized access to critical data. The implications of this vulnerability extend beyond Depot Repair, potentially compromising multiple components within the Oracle E-Business Suite. Attackers can achieve unauthorized updates, inserts, or deletions of accessible data, significantly affecting data integrity and confidentiality.

References