Vulnerability in Oracle E-Business Suite Affecting Advanced Outbound Telephony
CVE-2017-3386

8.2HIGH

Key Information:

Vendor
Oracle
Status
Advanced Outbound Telephony 12.1.1;12.1.2;12.1.3;12.2.3;12.2.4;12.2.5;12.2.6
Vendor
CVE Published:
27 January 2017

Summary

A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to exploit the system. This vulnerability, present in several supported versions, requires human interaction from a third party for successful exploitation. If attacked, this vulnerability could lead to unauthorized access to sensitive data and perform critical operations like updating, inserting, or deleting accessible data. The consequences of such attacks can significantly impact not only the Advanced Outbound Telephony component but also other associated products.

Affected Version(s)

Advanced Outbound Telephony 12.1.1;12.1.2;12.1.3;12.2.3;12.2.4;12.2.5;12.2.6 Advanced Outbound Telephony 12.1.1;12.1.2;12.1.3;12.2.3;12.2.4;12.2.5;12.2.6

References

http://www.securityfocus.com/bid/95531
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.