CVE-2026-101630
MediumCVSS 5.4Summary
Vulnerability in Oracle Advanced Outbound Telephony (component Internal Operations) of Oracle E-Business Suite versions 12.2.3-12.2.15. It allows a low-privileged attacker with network access via HTTP to modify and read some data, but requires human interaction and may impact additional products.
Risk Assessment
Could lead to unauthorized modification or read access to Oracle Advanced Outbound Telephony data and potentially affect related systems. However, it requires user interaction, limiting attack vectors.
Recommendation
Apply the security updates provided by Oracle for versions 12.2.3-12.2.15. Additionally, restrict network access to necessary addresses and monitor for suspicious user activity.
Other vulnerabilities in Oracle Advanced Outbound Telephony
See all- CVE-2017-10417High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-10416High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3393High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3414High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with HTTP network access to compromise the system. It requires user interaction, which may lead to unauthorized access to critical data.
- CVE-2017-3413High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
- CVE-2017-3412High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3411High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk of an attack.
- CVE-2017-3410High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
- CVE-2017-3409High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3408High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
Original NVD description (English source)
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Advanced Outbound Telephony, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Advanced Outbound Telephony accessible data as well as unauthorized read access to a subset of Oracle Advanced Outbound Telephony accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS