oracle banking-payments CVE-2020-2712 is a vulnerability in Oracle Banking Payments
Published on January 15, 2020

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).

NVD


Products Associated with CVE-2020-2712

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-2712 are published in Oracle Banking Payments:

Oracle Banking Payments
 

Affected Versions

Oracle Corporation Banking Payments Version 14.1.0-14.3.0 is affected by CVE-2020-2712

Exploit Probability

EPSS
0.80%
Percentile
73.73%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.