CVE-2020-14692
First published: Wed Jul 15 2020(Updated: )
Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Loan Loss Forecasting and Provisioning accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Financial Services Loan Loss Forecasting and Provisioning | >=8.0.6<=8.0.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-14692.
What is the title of the vulnerability?
The title of the vulnerability is 'Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications'.
What is the affected software?
The affected software is the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications.
What versions of the affected software are affected?
Versions 8.0.6 to 8.0.8 of the Oracle Financial Services Loan Loss Forecasting and Provisioning product are affected.
How severe is the vulnerability?
The vulnerability has a severity rating of 6.5, which is considered medium.
Is the vulnerability easily exploitable?
Yes, the vulnerability is easily exploitable.
What privileges does an attacker need to exploit the vulnerability?
An attacker with low privileges and network access can exploit the vulnerability.
Where can I find more information about the vulnerability?
More information about the vulnerability can be found at the following link: [https://www.oracle.com/security-alerts/cpujul2020.html](https://www.oracle.com/security-alerts/cpujul2020.html).
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle financial services loan loss forecasting and provisioning
- version/oracle financial services loan loss forecasting and provisioning/8.0.6
- version/oracle financial services loan loss forecasting and provisioning/8.0.8