Vulnerability in Oracle E-Business Suite – Advanced Outbound Telephony Component

CVE-2017-3375

What is CVE-2017-3375?

The Oracle Advanced Outbound Telephony component within Oracle E-Business Suite has a vulnerability that allows unauthenticated attackers with network access via HTTP to gain unauthorized access to critical data. Successful exploitation typically requires human interaction from a victim. Although the vulnerability exists in the Advanced Outbound Telephony component, it may have broader implications, impacting the integrity and confidentiality of data across additional Oracle products. Attackers could potentially manipulate accessible data, including unauthorized updates, inserts, or deletions, compromising the security of the entire system.

References