CVE-2020-2587

🗓️ 15 Jan 2020 16:34:02Reported by oracleType

Vulnerability in Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers) with easily exploitable vulnerability allowing low privileged attacker to compromise data and cause partial denial of service

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the Hierarchy Diagrammers component in the Oracle Human Resources software allows a hacker to gain access to data for modification, addition, or deletion, to gain unauthorized access to protected information, or to cause partial service interruption.	6 Feb 202000:00	–	bdu_fstec
Circl	CVE-2020-2587	20 Sep 202022:00	–	circl
CNVD	Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2020-04368)	15 Jan 202000:00	–	cnvd
Check Point Advisories	Oracle E-Business Suite SQL Injection (CVE-2020-2586; CVE-2020-2587)	8 Apr 202000:00	–	checkpoint_advisories
CVE	CVE-2020-2587	15 Jan 202016:34	–	cve
EUVD	EUVD-2020-22380	7 Oct 202500:30	–	euvd
NVD	CVE-2020-2587	15 Jan 202017:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - January 2020	14 Jan 202000:00	–	oracle
Tenable Nessus	Oracle E-Business Suite Multiple Vulnerabilities (Jan 2020 CPU)	24 Jan 202000:00	–	nessus
OSV	CVE-2020-2587	15 Jan 202017:15	–	osv

[
  {
    "product": "Human Resources",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.1-12.1.3"
      },
      {
        "status": "affected",
        "version": "12.2.3-12.2.9"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2020.html

15 Jan 2020 16:34Current

8.8High risk

Vulners AI Score8.8

CVSS 39.9

EPSS0.01882