8.2
High
CVE-2020-14595 Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager)
Description
Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager). Supported versions that are affected are 6.1 and 6.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iLearning accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle iLearning. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iLearning 6.1 | 6.1 → 6.1.1 | No fix stated |
Other CVEs of iLearning
The 5 CVEs of iLearning →
CVE-2020-2709
Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages)
4.7
Medium
CVE-2018-3146
Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration)
Not rated
CVE-2018-2989
Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration)
Not rated
CVE-2017-10199
Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages)
Not rated