CVE-2020-14543: High severity oracle hospitality reporting and analytics vulnerability
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Reporting and Analytics executes to compromise Oracle Hospitality Reporting and Analytics. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Reporting and Analytics. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Oracle Food and Beverage Applications vulnerability?
The vulnerability ID is CVE-2020-14543.
What is the affected software version of this vulnerability?
The affected software version is 9.1.
What is the severity of CVE-2020-14543?
The severity of CVE-2020-14543 is high with a CVSS score of 7.3.
How can an attacker exploit this vulnerability?
An attacker with low privileges and access to the infrastructure can easily exploit this vulnerability.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Oracle Security Alerts website: https://www.oracle.com/security-alerts/cpujul2020.html