Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-2953 EUVD-2020-22746GHSA-2p78-cf3j-x8wj

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promot…

Published Apr 15, 2020 · Updated Sep 27, 2024 · Assigned by oracle

Description

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 18.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in takeover of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

VendorProductAffectedFixed
Oracle Retail Customer Management and Segmentation Foundation 18.0 —

References