CVE-2020-2891

Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interfaces). The supported version that is affected is 8.0.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Liquidity Risk Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Liquidity Risk Management accessible data as well as unauthorized read access to a subset of Oracle Financial Services Liquidity Risk Management accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).

• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory

Published

Apr 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-28904Execution with Unnecessary Privileges in Nagios Fusion 4.1.8…9.8
• CVE-2020-28905Improper Input Validation in Nagios Fusion 4.1.8 and earlier…8.8
• CVE-2020-28906Incorrect File Permissions in Nagios XI 5.7.5 and earlier an…8.8
• CVE-2020-28907Incorrect SSL certificate validation in Nagios Fusion 4.1.8 …9.8
• CVE-2020-28908Command Injection in Nagios Fusion 4.1.8 and earlier allows …9.8
• CVE-2020-28909Incorrect File Permissions in Nagios Fusion 4.1.8 and earlie…8.8
• CVE-2020-28910Creation of a Temporary Directory with Insecure Permissions …9.8
• CVE-2020-28911Incorrect Access Control in Nagios Fusion 4.1.8 and earlier …6.5
• CVE-2020-28912With MariaDB running on Windows, when local clients connect …7
• CVE-2020-28914An improper file permissions vulnerability affects Kata Cont…7.1
• CVE-2020-28915A buffer over-read (at the framebuffer layer) in the fbcon c…5.8
• CVE-2020-28916hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via …5.5