CVE-2020-14630
First published: Wed Jul 15 2020(Updated: )
Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (component: File Upload). Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Enterprise Session Border Controller. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Session Border Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise Session Border Controller as well as unauthorized update, insert or delete access to some of Oracle Enterprise Session Border Controller accessible data and unauthorized read access to a subset of Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Enterprise Session Border Controller | =8.1.0 | |
| Oracle Enterprise Session Border Controller | =8.2.0 | |
| Oracle Enterprise Session Border Controller | =8.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Oracle Enterprise Session Border Controller vulnerability?
The vulnerability ID for this Oracle Enterprise Session Border Controller vulnerability is CVE-2020-14630.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Oracle Enterprise Session Border Controller version 8.1.0, 8.2.0, and 8.3.0.
What is the severity level of CVE-2020-14630?
CVE-2020-14630 has a severity level of 7.5 (high).
How can this vulnerability be exploited?
This vulnerability can be easily exploited by a high privileged attacker with network access via HTTP to upload malicious files.
Is there a fix available for this vulnerability?
Yes, Oracle has released a fix for this vulnerability. Please refer to the official Oracle Security Advisory for more information.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/oracle
- canonical/oracle enterprise session border controller
- version/oracle enterprise session border controller/8.1.0
- version/oracle enterprise session border controller/8.2.0
- version/oracle enterprise session border controller/8.3.0