Vulnerability in Oracle Sd-Wan Edge
CVE-2020-14606
Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface). Supported versions that are affected are 8.2 and 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SD-WAN Edge. While the vulnerability is in Oracle SD-WAN Edge, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle SD-WAN Edge. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
EPSS: 0.025 (84.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Oracle Sd-wan_edge — versions 8.2, 9.0
- Oracle Corporation Sd-wan Edge — versions 8.2, 9.0
References
- secalert_us@oracle.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-14606?
- CVE-2020-14606 is a critical-severity vulnerability in Oracle Sd-Wan Edge. CVSS score: 10.0/10. Published 2020-07-15.
- How severe is CVE-2020-14606?
- Critical severity. CVSS v3 base score is 10.0 out of 10.