Vulnerability in Oracle E-Business Suite Advanced Outbound Telephony Component

CVE-2017-3404

What is CVE-2017-3404?

A vulnerability exists in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite, enabling an unauthenticated attacker with network access via HTTP to potentially compromise the system. Exploitation of this vulnerability requires human interaction from someone other than the attacker and may lead to unauthorized access to sensitive data. Although the issue resides within the Advanced Outbound Telephony, the repercussions can significantly affect other interconnected products within the Oracle ecosystem, allowing for unauthorized updates, insertions, or deletions of accessible data.

References