CVE-2020-14862: Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are…

PriorityP357high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

1.83%

76.4th percentile

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3 - 12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks of this vulnerability can result in takeover of Oracle Universal Work Queue. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
oracle	universal_work_queue	12.2.3 – 12.2.9	—
oracle_corporation	universal_work_queue	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Vulnerability is exploitable over HTTP by a low-privileged authenticated network attacker targeting the Oracle Universal Work Queue 'Internal Operations' component — monitor for anomalous authenticated HTTP requests to Oracle E-Business Suite UWQ endpoints ↗
→Affected versions are Oracle E-Business Suite 12.2.3 through 12.2.9 — prioritize detection and patching on hosts running these specific release ranges ↗
→Successful exploitation results in full takeover (C/I/A all HIGH) — treat any unexpected privilege escalation or unauthorized process execution on Oracle UWQ nodes as a high-severity indicator ↗

·Oracle's advisory notes 'Remote exploit: No' in the risk matrix despite the NVD describing network-based exploitation — verify the exact attack vector scope (network-adjacent vs. full remote) in your environment before tuning detection thresholds ↗
·No authentication bypass is indicated — the attacker requires at least low-privileged credentials, so detections should focus on authenticated sessions exhibiting abnormal Internal Operations activity rather than unauthenticated probes ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C

vendor_oracle8.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.