Remote Code Execution Vulnerability in Oracle Commerce Platform by Oracle

CVE-2017-3296

What is CVE-2017-3296?

A vulnerability exists within the Oracle Commerce Platform, specifically in the Dynamo Application Framework, which enables an unauthenticated attacker with network access through HTTP to potentially gain unauthorized read access to certain data. This type of attack hinges on human interaction from a third party, making it important for users and administrators to be aware of the risks and take necessary precautions to mitigate threats. Affected versions include 10.0.3.5, 10.2.0.5, and 11.2.0.2.

References