Vulnerability in Oracle WebCenter Sites Affects Oracle Fusion Middleware

CVE-2017-3541

Summary

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware that can be easily exploited by an unauthenticated attacker with network access via HTTP. This flaw allows the attacker to compromise the Oracle WebCenter Sites environment, resulting in unauthorized access to sensitive data and enabling actions such as unauthorized updates, inserts, or deletions of accessible data within Oracle WebCenter Sites. Affected versions include 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0.

References