CVE-2020-2567 is a vulnerability in Oracle Retail Customer Management and Segmentation Foundation, specifically affecting version 18.0. This easily exploitable vulnerability allows a highly privileged attacker with network access via HTTP to compromise the system. Successful attacks require user interaction and can lead to unauthorized read, update, insert, or delete access to a subset of the application's data. The vulnerability has a CVSS 3.0 Base Score of 4.8 (Medium), indicating low confidentiality and integrity impacts. The attack vector is network-based, with low attack complexity, but requires high privileges and user interaction. While the vulnerability is within the Oracle Retail Customer Management and Segmentation Foundation, successful attacks may significantly impact additional products. Currently, there is no evidence of active exploitation, nor is exploit code available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
18.0CPE matchmatch criteria | cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.