Oracle Advanced Outbound Telephony Vulnerability in E-Business Suite
CVE-2017-3405

8.2HIGH

Key Information:

Vendor
Oracle
Status
Advanced Outbound Telephony
Vendor
CVE Published:
27 January 2017

Summary

A vulnerability exists in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite, allowing unauthorized network access via HTTP by an unauthenticated attacker. While the attacker must rely on human interaction to initiate the exploit, successful exploitation can lead to unauthorized access to sensitive data and provide attackers with the ability to update, insert, or delete crucial information within the system. This vulnerability significantly raises the risk of data compromise not only within the affected telephony component but across associated products.

Affected Version(s)

Advanced Outbound Telephony 12.1.1

Advanced Outbound Telephony 12.1.2

Advanced Outbound Telephony 12.1.3

References

http://www.securityfocus.com/bid/95531
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.