CVE-2020-14701 - Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface)

Back Back to CVE browser

CRITICAL

Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface)

Published Jul 15, 2020

10.0

CRITICAL

CVSS 3.1

EPSS 2.09%

Description

Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface). The supported version that is affected is 8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SD-WAN Aware. While the vulnerability is in Oracle SD-WAN Aware, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle SD-WAN Aware. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Affected products

Vendor Oracle Corporation Product SD-WAN Aware Default
n/a
- Version
  8.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

SD-WAN Aware

n/a

Version	Status	Constraints
8.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://www.oracle.com/security-alerts/cpujul2020.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner oracle

Published Jul 15, 2020

Updated Sep 26, 2024

Reserved Jun 19, 2020

Link CVE-2020-14701

CISA Vulnrichment

Updated Sep 26, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-14701

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-14701