5.3
Medium
CVE-2020-2887 Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result)
Description
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Customer Interaction History | 12.2.3-12.2.9 | No fix stated |
| Customer Interaction History | 12.1.1-12.1.3 | No fix stated |
Other CVEs of Customer Interaction History
The 10 CVEs of Customer Interaction History →
CVE-2024-20949
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result)
6.1
Medium
CVE-2024-20951
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result)
6.1
Medium
CVE-2024-20950
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result)
6.1
Medium
CVE-2021-2105
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result)
8.2
High