Vulnerability in Oracle E-Business Suite's Customer Interaction History Component

CVE-2017-3442

Summary

A vulnerability exists in the Oracle Customer Interaction History component of Oracle E-Business Suite, affecting versions 12.1.1, 12.1.2, and 12.1.3. This flaw allows unauthenticated attackers with network access via HTTP to exploit the system. Successful exploitation requires human interaction from a third party, making the attack vector unique. While the vulnerability resides within Oracle Customer Interaction History, the implications extend beyond it, potentially jeopardizing data integrity and confidentiality across various connected products. Attackers may gain unauthorized access to critical data, enabling them to update, insert, or delete information freely, thereby threatening the entire data ecosystem.

References