CVE Catalog

CVE-2017-3555

High
Published: Translated: NVD NIST

Summary

Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS).

Risk Assessment

The organization is at risk of service downtime for Oracle iReceivables, which may lead to loss of availability and impact business operations.

Recommendation

It is recommended to update to the latest version of Oracle E-Business Suite to mitigate this vulnerability and to monitor system access for potential attacks.

Other vulnerabilities in Oracle iReceivables

See all
Original NVD description (English source)

Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle iReceivables. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS