Oracle E-Business Suite Vulnerability in Outbound Telephony Component

CVE-2017-3389

What is CVE-2017-3389?

An access control vulnerability exists in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite, potentially allowing an unauthenticated attacker with HTTP network access to compromise the system. Successful exploitation requires human interaction from a third party, which may lead to unauthorized access to sensitive information or manipulation of data within the component. This vulnerability particularly affects versions 12.1.1 through 12.2.6 of the Oracle E-Business Suite, exposing critical data and potentially allowing for unauthorized updates, inserts, or deletions of accessible data.

References