CRITICAL🇵🇱 Wersja polska

CVE-2020-2953

CVSS 9.8v3.1pub. 2020-04-15upd. 2024-11-21

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in takeover of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Oracle Retail Customer Management And Segmentation Foundation

    APP
    Oracle
    18.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth BypassDoS
CWE
References

Related vulnerabilities

CVE-2022-22965CRITICAL9.8⚠ KEVPL ✓same product

Spring4Shell — RCE przez data binding w Spring MVC/WebFlux na JDK 9+

CVE-2020-5413CRITICAL9.8PL ✓same product

RCE przez deserializację Kryo w Spring Integration Framework

CVE-2020-10683CRITICAL9.8PL ✓same product

XXE w bibliotece dom4j — domyślne zezwolenie na zewnętrzne encje XML

CVE-2019-17267CRITICAL9.8PL ✓same product

Niebezpieczna deserializacja w FasterXML jackson-databind (Polymorphic Typing)

CVE-2019-16335CRITICAL9.8PL ✓same product

Niebezpieczna deserializacja (Polymorphic Typing) w FasterXML jackson-databind