User Interface Vulnerability in Oracle Financial Services Applications

CVE-2020-2936

What is CVE-2020-2936?

A vulnerability exists in the User Interface component of Oracle Financial Services Balance Sheet Planning, where low privileged attackers with network access via HTTP can exploit this weakness. Successful exploitation allows attackers to perform unauthorized actions such as creating, deleting, or modifying critical data within the application. Furthermore, this can grant unauthorized read access to a subset of accessible data, posing significant risks to data confidentiality and integrity. It is crucial for users of affected versions to implement appropriate security measures to mitigate potential threats.

References