Vulnerability in Oracle E-Business Suite's Depot Repair Section
CVE-2020-2850

8.2HIGH

Key Information:

Vendor
Oracle
Status
Depot Repair
Vendor
CVE Published:
15 April 2020

Summary

The vulnerability in Oracle Depot Repair within the Oracle E-Business Suite allows an unauthenticated attacker to exploit the system via HTTP, requiring human interaction for successful attacks. This flaw could lead to unauthorized access to sensitive data, including the ability to manipulate records through unauthorized creation, insertion, or deletion of data in Depot Repair. The impact of this vulnerability extends beyond Depot Repair, potentially affecting other components of the E-Business Suite.

Affected Version(s)

Depot Repair 12.1.1-12.1.3

References

https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.