7.1 High

CVE-2020-2688 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial…

Description

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).

Affected products and versions

Product	Affected versions	Fixed in
Financial Services Analytical Applications Infrastructure	8.0.4-8.0.8	No fix stated

References

www.oracle.com www.oracle.com

Timeline

Published January 15, 2020
Last modified September 30, 2024

The 19 CVEs of Financial Services Analytical Applications Infrastructure →

CVE-2023-21901 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial… 7.4 High CVE-2021-35687 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial… 5.3 Medium CVE-2021-35686 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial… 4.3 Medium CVE-2021-2140 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial… 6.1 Medium

Track this CVE