CVE-2020-2931 is a critical vulnerability affecting Oracle Knowledge versions 8.6.0 through 8.6.3, specifically within the Web Applications - InfoCenter component. This easily exploitable flaw allows an unauthenticated attacker to compromise the system via HTTP network access. With a CVSS 3.0 Base Score of 9.8, successful exploitation can lead to a complete takeover of Oracle Knowledge, impacting confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) or active exploitation (KEV) has been identified, and community discussion and media coverage are minimal, its high severity necessitates immediate patching.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 8.6.0, <= 8.6.3CPE matchmatch criteria | cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.