CVE-2017-10360
HighSummary
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.
Risk Assessment
Attacks can result in unauthorized creation, deletion, or modification of data, which can severely impact the organization's security and data integrity.
Recommendation
It is recommended to update to the latest version of Oracle WebCenter Content and implement additional security measures to minimize the risk of attacks.
Other vulnerabilities in Oracle WebCenter Content (Oracle Fusion Middleware)
See all- CVE-2017-10075High
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.
- CVE-2017-10040High
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products.
Original NVD description (English source)
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Content accessible data as well as unauthorized read access to a subset of Oracle WebCenter Content accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N).