Oracle HTTP Server Vulnerability in Fusion Middleware

CVE-2020-2952

What is CVE-2020-2952?

This vulnerability affects the Oracle HTTP Server within Oracle Fusion Middleware, specifically targeting the Web Listener component. It allows unauthenticated attackers with network access via HTTP to exploit the server, potentially leading to unauthorized updates, inserts, or deletions of accessible data. Additionally, attackers might gain unauthorized read access to sensitive data hosted on Oracle HTTP Server, highlighting the critical need for patching and mitigation strategies.

References