CVE-2020-2795

5 documents5 sources
Severity
6.3MEDIUM
EPSS
0.5%
top 35.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle KnowledgeOracle Corporation Knowledge
Timeline
PublishedApr 15
Latest updateMay 24

Description

Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Knowledge executes to compromise Oracle Knowledge. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Knowledge. CVSS …

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:HExploitability: 0.3 | Impact: 5.9

Affected Packages2 packages

▶NVDoracle/knowledge8.6.0 — 8.6.2
▶CVEListV5oracle_corporation/knowledge8.6.0-8.6.2

🔴Vulnerability Details

2
GHSA
GHSA-rh53-4vm2-q4c8: Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)↗2022-05-24
▶
CVEList
CVE-2020-2795: Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)↗2020-04-15
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Knowledge Risk Matrix: Information Manager Console — CVE-2020-2795↗2020-04-15
▶

💬Community

1
Bugzilla
CVE-2020-14306 openshift-service-mesh/istio-rhel8-operator: control plane can deploy gateway image to any namespace↗2020-06-24
▶
CVE-2020-2795 (MEDIUM CVSS 6.3) | Vulnerability in the Oracle Knowled | cvebase.io