Oracle Automatic Service Request Vulnerability in Oracle Support Tools

CVE-2017-3618

Summary

A security vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools allows a low privileged attacker with access to the infrastructure where ASR executes to compromise its operations. This can lead to unauthorized creation, deletion, or modification of critical data within ASR. Attackers may exploit this flaw to gain unauthorized access to sensitive information or manipulate all data accessible through the ASR system, highlighting significant risks to the integrity and confidentiality of organizational data.

References