CVE-2020-2591

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Applications Desktop Integrator accessible data as well as unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).

• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25890The web application of Kyocera printer (ECOSYS M2640IDW) is …6.1
• CVE-2020-2590Vulnerability in the Java SE, Java SE Embedded product of Or…3.7
• CVE-2020-25900HelloTalk through 3.4.1 stores full-precision GPS coordinate…5.3
• CVE-2020-25901Host Header Injection in Spiceworks 7.5.7.0 allowing the att…6.1
• CVE-2020-25902Blackboard Collaborate Ultra 20.02 is affected by a cross-si…6.1
• CVE-2020-25905An SQL Injection vulnerabilty exists in Sourcecodester Mobil…9.8
• CVE-2020-25911A XML External Entity (XXE) vulnerability was discovered in …9.1
• CVE-2020-25912A XML External Entity (XXE) vulnerability was discovered in …9.1
• CVE-2020-25915Cross Site Scripting (XSS) vulnerability in UserController.p…5.4
• CVE-2020-25917Stratodesk NoTouch Center before 4.4.68 is affected by: Inco…8.8
• CVE-2020-2592Vulnerability in the Oracle AutoVue product of Oracle Supply…5.3
• CVE-2020-25925Cross Site Scripting (XSS) in Webmail Calender in IceWarp We…6.1