CVE-2020-14875

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)

Critical · published October 21, 2020

CVSS v3.1
9.1
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

🚨 Unauthenticated network access is the gateway to chaos! An attacker can exploit CVE-2020-14875 and gain unauthorized access to your Oracle Marketing data without breaking a sweat! 🔥 Think of it like a restaurant with a faulty front door that anyone can stroll through, grabbing the menus (data) and rearranging the tables (modifying records) without a single security check in place. This vulnerability lets intruders bypass the bouncer entirely! If exploited, an attacker could create, modify, or delete critical data at will, jeopardizing the integrity and confidentiality of your Oracle Marketing environment. Imagine someone walking into your business, tampering with sensitive information, and leaving you completely in the dark about what just happened!

Put simply

Think of it like a restaurant with a faulty front door that anyone can stroll through, grabbing the menus (data) and rearranging the tables (modifying records) without a single security check in place. This vulnerability lets intruders bypass the bouncer entirely! This vulnerability in Oracle Marketing allows an unauthenticated attacker with network access via HTTP to compromise the system, resulting in unauthorized actions on critical data within the Oracle E-Business Suite.

What to do

If exploited, an attacker could create, modify, or delete critical data at will, jeopardizing the integrity and confidentiality of your Oracle Marketing environment. Imagine someone walking into your business, tampering with sensitive information, and leaving you completely in the dark about what just happened! To mitigate this vulnerability, immediately update your Oracle E-Business Suite to the latest version that addresses CVE-2020-14875. Additionally, restricting HTTP access and implementing tighter network controls are essential to safeguard your sensitive data. You've got this! Stay vigilant and patch your systems, and you'll keep those pesky intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02225 · 82.6th percentile
Published
2020-10-21T14:04Z
EPSS history
Timeline
  • 21 OCT 14:04Z
    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)
    cvelistv5