Unauthorized Access Vulnerability in Oracle Tuxedo by Oracle
CVE-2017-10266

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Tuxedo
Vendor
CVE Published:
14 November 2017

What is CVE-2017-10266?

An easily exploitable vulnerability exists in Oracle Tuxedo, part of the Oracle Fusion Middleware suite, allowing unauthorized network access via Jolt. This flaw potentially enables unauthenticated attackers to gain unauthorized read access to sensitive data within the system. Affected versions include 11.1.1, 12.1.1, 12.1.3, and 12.2.2. Organizations using these versions are encouraged to review their security measures and apply necessary updates to mitigate risk.

Affected Version(s)

Tuxedo 11.1.1

Tuxedo 12.1.1

Tuxedo 12.1.3

References

http://www.securityfocus.com/bid/101852
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/alert...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-10266 : Unauthorized Access Vulnerability in Oracle Tuxedo by Oracle