CVE-2020-2854: Oracle Advanced Outbound Telephony UI flaw allows unauthenticated data access

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

high priorityCVSS 8.2 with high confidentiality impact and a very high EPSS percentile, though exploitation requires user interaction and no KEV listing or public exploit is confirmed.

What it is

Oracle Advanced Outbound Telephony (part of Oracle E-Business Suite, versions 12.1.1-12.1.3) has a vulnerability in its User Interface component. An unauthenticated network attacker can exploit it, but a victim must be tricked into interacting with the attack. It matters because successful exploitation can expose critical data and allow modification of records in the affected product and potentially other products.

Impact

An attacker gains unauthorized read access to critical data and can insert, update, or delete some data accessible through Oracle Advanced Outbound Telephony. The scope change means other products may also be significantly impacted.

Attack surface

Reachable over the network via HTTP with no authentication required, but exploitation requires human interaction from a person other than the attacker, consistent with the CVSS vector AV:N/AC:L/PR:N/UI:R/S:C.

Exploitation

Not listed in CISA KEV and no public exploit references are provided; EPSS shows a high 30-day probability (0.66186, 99.2nd percentile), suggesting elevated likelihood of attempted exploitation.

What to do

• Apply the Oracle April 2020 Critical Patch Update (cpuapr2020) for Advanced Outbound Telephony 12.1.1-12.1.3.
• Restrict network access to the Oracle E-Business Suite HTTP interface to trusted users and networks.
• Train users not to click unsolicited links or open untrusted content that could trigger the required interaction.
• Monitor and review access logs for unusual activity against the Advanced Outbound Telephony UI.
• If patching is delayed, consider temporarily disabling or limiting the affected UI functionality.

Detection

• Review HTTP access logs for anomalous requests to Advanced Outbound Telephony UI endpoints from unauthenticated or unexpected sources.
• Alert on unusual data access or modification patterns in Advanced Outbound Telephony tables and audit trails.
• Correlate user-reported suspicious link clicks with subsequent database or application activity.
• Monitor for exploitation attempts referenced in Oracle CPU advisories and threat intelligence feeds.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.