CVE-2020-2714 - Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (comp

CVE-2020-2714

Summary

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

References

https://www.oracle.com/security-alerts/cpujan2020.html

Vulnerable Configurations

cpe:2.3:a:oracle:banking_payments:14.1.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:banking_payments:14.1.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:banking_payments:14.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:banking_payments:14.3.0:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 08-07-2022 - 20:01)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:N/A:N

refmap via4

misc

https://www.oracle.com/security-alerts/cpujan2020.html

Last major update

08-07-2022 - 20:01

Published

15-01-2020 - 17:15

Last modified

08-07-2022 - 20:01