User Interface Vulnerability in Oracle Financial Services Profitability Management
CVE-2020-2940

7.1HIGH

Key Information:

Vendor

Oracle
Status
Financial Services Profitability Management
Vendor
CVE Published:
15 April 2020

What is CVE-2020-2940?

A vulnerability in the User Interface of Oracle Financial Services Profitability Management allows low-privileged attackers to exploit network access via HTTP. A successful attack can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to sensitive information within the platform. This significantly compromises the confidentiality and integrity of the data managed by Oracle Financial Services Profitability Management.

Affected Version(s)

Financial Services Profitability Management 8.0.6

Financial Services Profitability Management 8.0.7

References

https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.