ID CVE-2020-2719
Summary Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:banking_corporate_lending:14.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_corporate_lending:14.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending:14.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_corporate_lending:14.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending:14.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_corporate_lending:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending:12.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_corporate_lending:12.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending:12.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:banking_corporate_lending:12.4.0:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 29-04-2022 - 14:01)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:N/A:N
refmap via4
misc https://www.oracle.com/security-alerts/cpujan2020.html
Last major update 29-04-2022 - 14:01
Published 15-01-2020 - 17:15
Last modified 29-04-2022 - 14:01
Back to Top