CVE-2017-3440
HighSummary
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
Risk Assessment
Attacks may lead to unauthorized access to sensitive data and the ability to modify it, which can significantly impact the organization's security.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite and implement additional security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Oracle Customer Interaction History
See all- CVE-2017-3442High
A vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
- CVE-2017-3441High
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
- CVE-2016-5595High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5593High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5592High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.
- CVE-2016-5591High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5587High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-3512High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Function Security.
- CVE-2026-60724Medium
Vulnerability in Oracle Customer Interaction History (Outcome-Result) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Original NVD description (English source)
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts).