CVE-2020-2649
First published: Wed Jan 15 2020(Updated: )
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Retail Customer Management and Segmentation Foundation executes to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Retail Customer Management and Segmentation Foundation | =16.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Oracle Retail Customer Management and Segmentation Foundation vulnerability?
The vulnerability ID for this Oracle Retail Customer Management and Segmentation Foundation vulnerability is CVE-2020-2649.
What is the severity rating for CVE-2020-2649?
CVE-2020-2649 has a severity rating of low.
Which component of Oracle Retail Applications is affected by this vulnerability?
This vulnerability affects the Internal Operations component of Oracle Retail Applications.
What version of Oracle Retail Customer Management and Segmentation Foundation is affected by this vulnerability?
Version 16.0 of Oracle Retail Customer Management and Segmentation Foundation is affected by this vulnerability.
How can this vulnerability be exploited?
This vulnerability can be easily exploited by a low privileged attacker with logon access to the infrastructure.
- collector/nvd-index
- agent/tags
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle retail customer management and segmentation foundation
- version/oracle retail customer management and segmentation foundation/16.0