CVE-2017-3372
HighSummary
A vulnerability in the Oracle Interaction Blending component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
Risk Assessment
Successful attacks can lead to unauthorized access to critical data and complete access to all data accessible in Oracle Interaction Blending, posing a serious threat to the integrity and confidentiality of information.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and implement additional security measures to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Oracle Interaction Blending
See all- CVE-2026-60832Medium
Vulnerability in Oracle Interaction Blending (Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and RMI access. Can lead to partial confidentiality, integrity, and availability impact.
- CVE-2026-60828High
Vulnerability in Oracle Interaction Blending from Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
- CVE-2026-60703High
Vulnerability in Oracle Interaction Blending (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain unauthorized access to critical data and create, delete, or modify it.
Original NVD description (English source)
Vulnerability in the Oracle Interaction Blending component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Interaction Blending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Interaction Blending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Interaction Blending accessible data as well as unauthorized update, insert or delete access to some of Oracle Interaction Blending accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts).