CoreCVE
Back

CRITICAL

Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)

Published Apr 15, 2020

Description

Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in takeover of Oracle Knowledge. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner oracle
Published Apr 15, 2020
Updated Sep 30, 2024
Reserved Dec 10, 2019
Link CVE-2020-2791
CISA Vulnrichment
Updated Sep 30, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-2791
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-2791