CVE-2020-2870

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).

• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory

Published

Apr 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-28687The edit profile functionality in ARTWORKS GALLERY IN PHP, C…8.8
• CVE-2020-28688The add artwork functionality in ARTWORKS GALLERY IN PHP, CS…8.8
• CVE-2020-2869Vulnerability in the Oracle WebLogic Server product of Oracl…4.3
• CVE-2020-28692In Gila CMS 1.16.0, an attacker can upload a shell to tmp di…7.2
• CVE-2020-28693An unrestricted file upload issue in HorizontCMS 1.0.0-beta …8.8
• CVE-2020-28695Askey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_…8.8
• CVE-2020-28702A SQL injection vulnerability in TopicMapper.xml of PybbsCMS…7.5
• CVE-2020-28705FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF)…4.3
• CVE-2020-28707The Stockdio Historical Chart plugin before 2.8.1 for WordPr…6.1
• CVE-2020-2871Vulnerability in the Oracle Advanced Outbound Telephony prod…8.2
• CVE-2020-28713Incorrect access control in push notification service in Nig…6.5
• CVE-2020-28715An issue was discovered in kdmserver service in LeEco LeTV X…9.8