CVE-2020-2865

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2020-2865

CVE-2020-2865 affects the Oracle Configuretor (Oracle Supply Chain) — Installation component in Configurator versions 12.1 and 12.2. The issue allows an unauthenticated, network-accessible attacker via HTTP to read a subset of Confidential data. Root cause: insecure access to the Installation com...