Unauthenticated Access Vulnerability in Oracle iPlanet Web Server by Oracle

CVE-2017-10055

Summary

This vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to exploit the system via HTTP. Successful exploitation of this vulnerability requires interaction from a user other than the attacker, enabling unauthorized updates, insertions, or deletions to accessible data. Additionally, it facilitates unauthorized read access to certain subsets of data within Oracle iPlanet Web Server. The exploitation of this flaw can lead to significant impacts on the web server's data integrity and confidentiality, ultimately threatening the security of connected systems.

References