CVE-2020-2937
Last modified
CVE-2020-2937 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. EPSS estimates a 1.05% chance of exploitation in the next 30 days.
Description
Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Insurance Accounting Analyzer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Insurance Accounting Analyzer accessible data as well as unauthorized read access to a subset of Oracle Insurance Accounting Analyzer accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Insurance Accounting Analyzer | >= 8.0.6, <= 8.0.9 |
References
- https://www.oracle.com/security-alerts/cpuapr2020.htmlPatch, Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-2937?
How severe is CVE-2020-2937?
How do I fix CVE-2020-2937?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-29362An issue was discovered in p11-kit 0.21.1 through 0.23.21. A…5.3
- CVE-2020-29363An issue was discovered in p11-kit 0.23.6 through 0.23.21. A…7.5
- CVE-2020-29364In NetArt News Lister 1.0.0, the news headlines vulnerable t…4.8
- CVE-2020-29367blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-b…7.8
- CVE-2020-29368An issue was discovered in __split_huge_pmd in mm/huge_memor…7
- CVE-2020-29369An issue was discovered in mm/mmap.c in the Linux kernel bef…7
- CVE-2020-29370An issue was discovered in kmem_cache_alloc_bulk in mm/slub.…7
- CVE-2020-29371An issue was discovered in romfs_dev_read in fs/romfs/storag…3.3
- CVE-2020-29372An issue was discovered in do_madvise in mm/madvise.c in the…4.7
- CVE-2020-29373An issue was discovered in fs/io_uring.c in the Linux kernel…6.5
- CVE-2020-29374An issue was discovered in the Linux kernel before 5.7.3, re…3.6
- CVE-2020-29375An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.5…8.8
Are you affected by CVE-2020-2937?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
