Vulnerability in Oracle E-Business Suite User Interface Component

CVE-2017-3360

Summary

The identified vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to potentially compromise sensitive information. While the vulnerability resides within Customer Intelligence, successful exploitation may necessitate human interaction and could significantly affect other connected components and data. Attackers can gain unauthorized access to customer intelligence data, with severe implications including unauthorized updates, insertions, or deletions of critical data. This access could lead to a breach of confidentiality and integrity, putting critical organizational information at risk.

References