Unauthorized Access Risk in Oracle E-Business Suite iSupport Component
CVE-2017-10415

8.2HIGH

Key Information:

Vendor
Oracle
Status
Vendor
CVE Published:
19 October 2017

Summary

A vulnerability exists in the iSupport component of Oracle E-Business Suite that allows unauthenticated attackers with network access to exploit the system. This flaw can facilitate unauthorized access to critical data, enabling the attacker to modify or tamper with information. While the exploitation requires human interaction, the consequences may extend beyond the iSupport component, potentially affecting other integrated systems. Organizations using affected versions should ensure they implement necessary protections to safeguard sensitive information against possible unauthorized access.

Affected Version(s)

iSupport 12.1.1

iSupport 12.1.2

iSupport 12.1.3

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.