Vulnerability in Oracle Retail Open Commerce Platform by Oracle

CVE-2017-3451

Summary

A vulnerability exists in the Oracle Retail Open Commerce Platform, allowing low privileged attackers with network access via HTTP to potentially compromise system integrity. Successful exploitation requires human interaction from an individual other than the attacker, presenting a unique challenge for mitigation. Attackers may gain unauthorized access to sensitive data, including potential for unauthorized updates or deletions. The impact is significant, affecting the confidentiality and integrity of the platform's accessible data, which can also extend to other interconnected systems.

References