Vulnerability in Oracle E-Business Suite Advanced Outbound Telephony Detected

CVE-2017-3378

What is CVE-2017-3378?

A vulnerability has been identified in Oracle E-Business Suite's Advanced Outbound Telephony component, which permits unauthenticated attackers with network access to exploit it via HTTP. This flaw requires user interaction from a third party, making it a unique threat vector. Once exploited, attackers may gain unauthorized access to sensitive data, potentially compromising the integrity and confidentiality of Oracle Advanced Outbound Telephony. Furthermore, exploitation can allow unauthorized actions, including updates, inserts, or deletions of data accessible through the component, posing significant risks to interconnected systems.

References