PT-2017-15935 · Oracle · Oracle Fusion Middleware+1

Publicado 2017-04-24 · Atualizado 2019-10-03 · CVE-2017-3499

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions prior to 11.1.12.0.0

Description The issue allows an unauthenticated attacker with network access via HTTPS to compromise Oracle Social Network, resulting in unauthorized access to critical data or complete access to all Oracle Social Network accessible data.

Recommendations For versions prior to 11.1.12.0.0, update to version 11.1.12.0.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-3499

Produtos afetados

Oracle Fusion Middleware

Oracle Social Network

Referências · 4

• http://securitytracker.com/id/1038291 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3499 · Nota de Segurança
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Aviso do Fabricante
• http://securityfocus.com/bid/97878 · Nota