CVE-2020-14728— Oracle NetSuite 安全漏洞

N/A

Vulnerability in the SuiteCommerce Advanced (SCA) component of Oracle NetSuite service. Supported versions that are affected are Montblanc, Vinson, Elbrus, Kilimanjaro, Aconcagua, 2018.2, 2019.1, 2019.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise NetSuite SCA. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in NetSuite SCA, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of NetSuite SCA accessible data as well as unauthorized read access to a subset of NetSuite SCA data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

N/A

Oracle NetSuite 安全漏洞

Oracle NetSuite是甲骨文（Oracle）的一个云ERP系统。 Oracle NetSuite service 存在安全漏洞，该漏洞允许低特权攻击者通过HTTP访问网络，从而破坏NetSuite SCA。成功的攻击需要攻击者以外的其他人进行人为交互，并且该漏洞位于NetSuite SCA中，但攻击可能会严重影响其他产品。对该漏洞的成功攻击可能导致未经授权的更新，插入或删除对某些NetSuite SCA可访问数据的访问以及未经授权的对NetSuite SCA数据子集的读取访问。

N/A

N/A