Vulnerability in Oracle Enterprise Manager Application Performance Monitoring

CVE-2020-2946

Summary

A vulnerability exists in the Application Performance Management component of Oracle Enterprise Manager, specifically in versions 12.1.0.5, 13.2.0.0, and 13.3.0.0. This flaw can be exploited by high-privileged attackers with network access via HTTP, leading to unauthorized access to sensitive data. Attackers could potentially manipulate Application Performance Management by executing operations such as unauthorized updates, insertions, or deletions of accessible data, as well as cause a partial denial of service. This poses a significant risk to the integrity and confidentiality of monitored applications.

References