Oracle E-Business Suite Marketing Vulnerability Exposes Critical Data

CVE-2020-2861

Summary

A vulnerability in Oracle Marketing within the Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to exploit the system. Although exploitation requires human interaction from an individual other than the attacker, successful attempts can lead to unauthorized access to sensitive data. Attackers may gain significant control over Oracle Marketing data, which includes the ability to update, insert, or delete access to critical information. This vulnerability could also have cascading impacts on other interconnected products.

References