CVE-2020-14716 — Oracle Common Applications vulnerability
4 documents4 sources
Severity
4.7MEDIUMNVD
EPSS
0.7%
top 27.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 15
Latest updateMay 24
Description
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-v8pj-w2gf-97p5: Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework)↗2022-05-24
CVEList▶
CVE-2020-14716: Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework)↗2020-07-15
📋Vendor Advisories
1Oracle▶
Oracle Oracle E-Business Suite Risk Matrix: CRM User Management Framework — CVE-2020-14716↗2020-07-15