CVE-2020-2793

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).

• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory

Published

Apr 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27923An out-of-bounds write was addressed with improved input val…7.8
• CVE-2020-27924An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2020-27925An issue existed in the handling of incoming calls. The issu…5.5
• CVE-2020-27926A use after free issue was addressed with improved memory ma…7.8
• CVE-2020-27927An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-27929A logic issue existed in the handling of Group FaceTime call…5.5
• CVE-2020-27930A memory corruption issue was addressed with improved input …7.8
• CVE-2020-27931A memory corruption issue existed in the processing of font …7.8
• CVE-2020-27932A type confusion issue was addressed with improved state han…7.8
• CVE-2020-27933A memory corruption issue was addressed with improved input …7.8
• CVE-2020-27935Multiple issues were addressed with improved logic. This iss…6.3
• CVE-2020-27936An out-of-bounds read issue existed that led to the disclosu…7.1