Unauthorized Access Vulnerability in Oracle Marketing of E-Business Suite

CVE-2020-2860

Summary

This vulnerability exists in the Oracle Marketing component of the Oracle E-Business Suite, specifically affecting versions 12.1.1 through 12.1.3. It allows an unauthenticated attacker to gain network access via HTTP, which can compromise the integrity and confidentiality of sensitive data. Successful exploitation involves interaction from a victim, which may lead to unauthorized access to critical data and the ability to update, insert, or delete accessible information within Oracle Marketing. The impact is significant as it goes beyond the immediate product, potentially affecting other interconnected systems.

References