CVE-2017-10416
HighSummary
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
Risk Assessment
Attacks may significantly impact additional products, resulting in unauthorized access and the ability to update, insert, or delete data in Oracle Advanced Outbound Telephony.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Oracle Advanced Outbound Telephony
See all- CVE-2017-10417High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3393High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3414High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with HTTP network access to compromise the system. It requires user interaction, which may lead to unauthorized access to critical data.
- CVE-2017-3413High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
- CVE-2017-3412High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3411High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk of an attack.
- CVE-2017-3410High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
- CVE-2017-3409High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3408High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
- CVE-2017-3407High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires user interaction, which may lead to unauthorized access to critical data.
Original NVD description (English source)
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Setup and Configuration). Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).