CVE-2020-2953: Critical severity oracle customer management and segmentation foundation vulnerability

Published Apr 15, 2020

Updated

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in takeover of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Retail Customer Management and Segmentation Foundation=18.0

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2020.html

Event History

Apr 15, 2020

CVE Published

via MITRE·01:29 PM

Data Sourced

via MITRE·01:29 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-2953?

The severity of CVE-2020-2953 is critical, with a severity value of 9.8.

What is the affected software of CVE-2020-2953?

The affected software of CVE-2020-2953 is Oracle Retail Customer Management and Segmentation Foundation version 18.0.

Is CVE-2020-2953 easily exploitable?

Yes, CVE-2020-2953 is an easily exploitable vulnerability.

How can an attacker exploit CVE-2020-2953?

An unauthenticated attacker with network access via HTTP can exploit CVE-2020-2953.

Where can I find more information about CVE-2020-2953?

You can find more information about CVE-2020-2953 on the Oracle Security Alerts page: [https://www.oracle.com/security-alerts/cpuapr2020.html](https://www.oracle.com/security-alerts/cpuapr2020.html).