PT-2017-15935 · Oracle · Oracle Fusion Middleware+1

Published 2017-04-24 · Updated 2019-10-03 · CVE-2017-3499

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions prior to 11.1.12.0.0

Description The issue allows an unauthenticated attacker with network access via HTTPS to compromise Oracle Social Network, resulting in unauthorized access to critical data or complete access to all Oracle Social Network accessible data.

Recommendations For versions prior to 11.1.12.0.0, update to version 11.1.12.0.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-3499

Affected Products

Oracle Fusion Middleware

Oracle Social Network

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-3499 · Security Note
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Vendor Advisory
• http://securitytracker.com/id/1038291 · Note
• http://securityfocus.com/bid/97878 · Note