Vulnerability in Oracle Knowledge
CVE-2020-2524
Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search). Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Knowledge. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Oracle Knowledge
- Oracle Corporation Knowledge — versions 8.6.0-8.6.3
References
- secalert_us@oracle.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-2524?
- CVE-2020-2524 is a medium-severity vulnerability in Oracle Knowledge. CVSS score: 5.9/10. Published 2020-04-15.
- How severe is CVE-2020-2524?
- Medium severity. CVSS v3 base score is 5.9 out of 10.