Vulnerability in Oracle E-Business Suite Advanced Outbound Telephony Component
CVE-2017-3403

8.2HIGH

Key Information:

Vendor
Oracle
Vendor
CVE Published:
27 January 2017

Summary

The vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to potentially exploit the system. Although it requires human interaction from a user other than the attacker, successful exploitation can lead to unauthorized access to critical data or even complete control over accessible data within the Oracle Advanced Outbound Telephony system. This could also permit unauthorized updates, insertions, or deletions of data, posing significant risks to the integrity and confidentiality of the information processed by the application.

Affected Version(s)

Advanced Outbound Telephony 12.1.1

Advanced Outbound Telephony 12.1.2

Advanced Outbound Telephony 12.1.3

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.