CVE-2020-14551Corporation Autovue 3D Professional Advanced vulnerability

4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 57.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 15
Latest updateMay 24

Description

Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle AutoVue accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-636c-p97j-wvv8: Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security)2022-05-24
CVEList
CVE-2020-14551: Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security)2020-07-15

📋Vendor Advisories

1
Oracle
Oracle Oracle Supply Chain Risk Matrix: Security — CVE-2020-145512020-07-15
CVE-2020-14551 — MEDIUM severity | cvebase