Vulnerability in Oracle E-Business Suite Knowledge Management Component
CVE-2017-3364

8.2HIGH

Key Information:

Vendor
Oracle
Status
Knowledge Management
Vendor
CVE Published:
27 January 2017

Summary

A vulnerability exists in the Oracle Knowledge Management component of Oracle E-Business Suite that can be exploited through HTTP by an unauthenticated attacker. This vulnerability allows unauthorized access to critical data and enables attacks that may lead to unauthorized updates, inserts, or deletions in the accessible data of Oracle Knowledge Management. Attacks exploit human interaction from a third party, indicating the need for social engineering tactics alongside technical exploitation. Organizations should promptly address this vulnerability to protect sensitive information.

Affected Version(s)

Knowledge Management 12.1.1

Knowledge Management 12.1.2

Knowledge Management 12.1.3

References

http://www.securityfocus.com/bid/95523
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.