Remote Code Execution Vulnerability in Oracle WebCenter Sites

CVE-2017-3540

Summary

A critical vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware that allows unauthenticated attackers with network access via HTTP to compromise the system. Exploiting this vulnerability may enable an unauthorized attacker to conduct unauthorized updates, inserts, or deletions of accessible data, as well as gain unauthorized read access to sensitive information. Successful exploitation can also result in significant operational disruptions, including frequent and repeatable crashes of the Oracle WebCenter Sites application, effectively causing a denial of service.

References