Vulnerability in Oracle E-Business Suite Advanced Outbound Telephony Component
CVE-2017-3379

8.2HIGH

Key Information:

Vendor
Oracle
Status
Advanced Outbound Telephony
Vendor
CVE Published:
27 January 2017

Summary

The vulnerability within the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to gain unauthorized access to sensitive information. Exploiting this vulnerability may lead to unauthorized modifications, deletions, or insertions of critical data within the system. While the primary component being targeted is Oracle Advanced Outbound Telephony, the repercussions of these attacks could extend to other associated products, highlighting a significant risk in organizational data integrity and confidentiality.

Affected Version(s)

Advanced Outbound Telephony 12.1.1

Advanced Outbound Telephony 12.1.2

Advanced Outbound Telephony 12.1.3

References

http://www.securityfocus.com/bid/95531
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.