CVE-2020-14658

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)

Critical · published July 15, 2020

CVSS v3.1
9.1
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

💥 An unauthenticated network attack could spell disaster for Oracle Marketing users! 🔥 Think of it as leaving the backdoor wide open in a high-security office — anyone with network access could just stroll in and access sensitive files without breaking a sweat. It's a perfect recipe for chaos! An attacker could gain unauthorized control over your marketing data: creating, modifying, or even deleting critical information. With a CVSS score of 9.1, this vulnerability poses a significant risk to confidentiality and integrity, making it a prime target for exploitation. You really don’t want a stranger messing with your marketing strategy!

Put simply

Think of it as leaving the backdoor wide open in a high-security office — anyone with network access could just stroll in and access sensitive files without breaking a sweat. It's a perfect recipe for chaos! This vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows unauthenticated attackers with network access to compromise the system, leading to unauthorized operations on sensitive data.

What to do

An attacker could gain unauthorized control over your marketing data: creating, modifying, or even deleting critical information. With a CVSS score of 9.1, this vulnerability poses a significant risk to confidentiality and integrity, making it a prime target for exploitation. You really don’t want a stranger messing with your marketing strategy! Patch the affected versions (12.1.1-12.1.3 and 12.2.3-12.2.9) to the latest available release immediately. Review access controls to ensure only authorized users can interact with critical data. Implement additional network security measures, such as firewalls, to limit exposure. You've got this! By taking action now, you’ll bolster your security and keep your marketing data safe! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01641 · 76.2th percentile
Published
2020-07-15T17:34Z
EPSS history
Timeline
  • 15 JUL 17:34Z
    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)
    cvelistv5