Oracle E-Business Suite Vulnerability in Knowledge Management Component

CVE-2017-3363

Summary

A vulnerability exists in the Oracle Knowledge Management component of Oracle E-Business Suite, primarily impacting versions 12.1.1, 12.1.2, and 12.1.3. This flaw can be easily exploited by unauthenticated attackers who have network access via HTTP. Successful exploitation necessitates human interaction from a person other than the attacker, enabling potential unauthorized access to sensitive data. Additionally, attackers may gain the ability to update, insert, or delete data accessible in Oracle Knowledge Management. This vulnerability poses significant risks to organizations relying on Oracle Knowledge Management, as it may lead to severe data breaches and operational disruptions.

References