Vulnerability in Oracle E-Business Suite's Advanced Outbound Telephony
CVE-2017-3406

8.2HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
27 January 2017

What is CVE-2017-3406?

A vulnerability exists in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite that can be exploited by an unauthenticated attacker with network access via HTTP. While the attacker must rely on human interaction for a successful exploit, the implications of this vulnerability can be serious. It allows unauthorized access to sensitive information and may enable the attacker to manipulate data by updating, inserting, or deleting information. The supported versions affected by this flaw include 12.1.1 through 12.2.6, potentially jeopardizing the integrity and confidentiality of user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Advanced Outbound Telephony 12.1.1

Advanced Outbound Telephony 12.1.2

Advanced Outbound Telephony 12.1.3

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.