CVE-2017-3328
HighSummary
Vulnerability in the Resources Module of the Oracle Common Applications component in Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications. It requires human interaction, increasing the risk for the organization.
Risk Assessment
Attacks may lead to unauthorized access to critical data and complete access to all data available in Oracle Common Applications, which can have serious security implications for the organization.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and implement additional security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Oracle Common Applications (Resources Module)
Original NVD description (English source)
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts).