User Interface Vulnerability in Oracle Financial Services Applications
CVE-2020-2939

7.1HIGH

Key Information:

Vendor
Oracle
Status
Financial Services Asset Liability Management
Vendor
CVE Published:
15 April 2020

Summary

A vulnerability exists in the User Interface of Oracle Financial Services Asset Liability Management that allows low privileged attackers with network access via HTTP to compromise the system. This exposure can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to specific data. Affected versions include 8.0.6 and 8.0.7, posing risks to the confidentiality and integrity of the data managed by this application.

Affected Version(s)

Financial Services Asset Liability Management 8.0.6

Financial Services Asset Liability Management 8.0.7

References

https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.