CVE-2017-10323
HighSummary
Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
Risk Assessment
Successful attacks can result in unauthorized access to data and the ability to update, insert, or delete data. This can significantly impact the organization's security and data integrity.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and implement additional security measures to restrict access to the system to authorized users.
Other vulnerabilities in Oracle Web Applications Desktop Integrator
See all- CVE-2026-83131High
Vulnerability in the Oracle Web Applications Desktop Integrator product (File download component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTPS can compromise the product. The vulnerability may also significantly impact additional products (scope change).
- CVE-2026-70755Medium
Vulnerability in Oracle Web Applications Desktop Integrator (component: File download) affecting versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can easily exploit it, resulting in unauthorized access to critical data or complete access to all accessible data.
- CVE-2016-3522High
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Application Service.
Original NVD description (English source)
Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Applications Desktop Integrator accessible data as well as unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV: