CVE-2020-14608

4 documents4 sources
Severity
8.2HIGH
EPSS
0.8%
top 26.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 15
Latest updateMay 24

Description

Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Fusion Middleware MapViewer accessible data

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:NExploitability: 3.9 | Impact: 4.2

Affected Packages2 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-x2jg-9c23-q285: Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server)2022-05-24
CVEList
CVE-2020-14608: Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server)2020-07-15

📋Vendor Advisories

1
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: Tile Server — CVE-2020-146082020-07-15