Vulnerability in Oracle E-Business Suite: Depot Repair Component

CVE-2020-2848

Summary

An access control vulnerability exists in the Oracle Depot Repair component of Oracle E-Business Suite, which could be exploited by an unauthenticated attacker with network access via HTTP. The attacker needs human interaction from a user to successfully execute the attack. This vulnerability poses a significant risk, as it allows unauthorized access to critical data, with potential ramifications that may extend to other interconnected products. Attackers could gain complete access to all data within Oracle Depot Repair and have unauthorized capabilities to update, insert, or delete data. Organizations using affected versions should prioritize mitigations to safeguard sensitive information.

References