Vulnerability in Oracle Enterprise Repository of Oracle Fusion Middleware

CVE-2017-10048

Summary

A vulnerability exists in the Oracle Enterprise Repository component of Oracle Fusion Middleware that allows an unauthenticated attacker with network access via HTTP to exploit this weakness. The vulnerability requires human interaction from a third party, enabling the attacker to potentially gain unauthorized access to critical data stored within the Oracle Enterprise Repository. Successful exploitation may lead to unauthorized actions including update, insert, or delete operations on accessible data. Given the nature of the product, attacks can also have broader impacts on additional interconnected applications.

References