Back to Advisories
CVE Advisory
CVE-2020-2838
Oracle E-business Suite
Oracle E-Business Suite version 12.1.1-12.1.3 allows remote attackers to manipulate paths to read files arbitrarily without authentication due to improper input validation.
Advisory Information
Affected Product Oracle E-business Suite
Title CVE-2020-2838
Description
Oracle E-Business Suite version 12.1.1-12.1.3 allows remote attackers to manipulate paths to read files arbitrarily without authentication due to improper input validation.
Year 2021
Published Date August 30, 2021