CVE-2020-2597

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Call Phone Number Page). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).

• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25952SQL injection vulnerability in PHPGurukul User Registration …9.8
• CVE-2020-25955SourceCodester Student Management System Project in PHP vers…5.4
• CVE-2020-2596Vulnerability in the Oracle CRM Technical Foundation product…4.7
• CVE-2020-25966Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpo…7.5
• CVE-2020-25967The member center function in fastadmin V1.0.0.20200506_beta…8.8
• CVE-2020-25969gnuplot v5.5 was discovered to contain a buffer overflow via…9.8
• CVE-2020-2598Vulnerability in the PeopleSoft Enterprise PeopleTools produ…6.1
• CVE-2020-25985MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. An…8.1
• CVE-2020-25986A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS…6.5
• CVE-2020-25987MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.x…7.5
• CVE-2020-25988UPNP Service listening on port 5555 in Genexis Platinum 4410…6.5
• CVE-2020-25989Privilege escalation via arbitrary file write in pritunl ele…7.8