CVE-2020-2557

CVE-2020-2557 is a medium-severity vulnerability affecting Oracle Demantra Demand Management versions 12.2.4, 12.2.4.1, 12.2.5, and 12.2.5.1. This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks require user interaction and can lead to unauthorized modification of some accessible data within Oracle Demantra Demand Management, potentially impacting additional products. The vulnerability has a CVSS 3.0 Base Score of 4.7, indicating a medium severity due to its low integrity impact. The attack vector is network-based, with low attack complexity, but requires user interaction. While the vulnerability itself is in Demantra, successful exploitation can have a significant impact on other products. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.