CVE-2020-2695

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework). Supported versions that are affected are 9.1 and 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CC Common Application Objects accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-269508.8In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condi CVE-2020-269516.1A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker alre CVE-2020-269528.8Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash wh CVE-2020-269534.3It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phish CVE-2020-269544.3When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed de CVE-2020-269556.5When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download opera CVE-2020-269566.1In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerabili CVE-2020-269576.5OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce CVE-2020-269586.1Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. T CVE-2020-269598.8During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corru CVE-2020-26968.8Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported version that is affecte CVE-2020-269608.8If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a poten