Unauthenticated Access Vulnerability in Oracle iSupport of Oracle E-Business Suite

CVE-2020-2872

What is CVE-2020-2872?

This vulnerability in Oracle iSupport within the Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation demands human interaction from a user other than the attacker, which can lead to unauthorized access to sensitive data and the potential for unauthorized modifications. The vulnerability can have wider implications, impacting other interconnected products. Attackers could gain complete access to all data accessible through Oracle iSupport, allowing unauthorized updates, insertions, or deletions of data, thereby threatening the integrity and confidentiality of critical information.

References