CVE-2020-14561

CWE-284 — Improper Access ControlCWE-20 — Improper Input Validation6 documents6 sources
Severity
7.3HIGH
EPSS
0.1%
top 79.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Hospitality Reporting AND AnalyticsOracle Food AND Beverage Applications
Timeline
PublishedJul 15
Latest updateMay 24

Description

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker. Successful att…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 1.3 | Impact: 5.9

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-6hf9-2c4c-m4j4: Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation)↗2022-05-24
▶
GHSA
Improper Input Validation in Apache Solr↗2022-02-10
▶
CVEList
CVE-2020-14561: Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation)↗2020-07-15
▶

📋Vendor Advisories

2
Red Hat
solr: replication handler allows a read-write operations to any location the solr user can access↗2020-08-17
▶
Oracle
Oracle Oracle Food and Beverage Applications Risk Matrix: Installation — CVE-2020-14561↗2020-07-15
▶
CVE-2020-14561 (HIGH CVSS 7.3) | Vulnerability in the Oracle Hospita | cvebase.io