Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2017-3419 | Oracle E-Business Suite 12.1.3 CRM Technical Foundation access control (Nessus ID 96608 / BID-95564) https://ift.tt/T3cRSz1 A vulnerability, which was classified as critical, has been found in Oracle E-Business Suite 12.1.3. This vulnerability affects unknown c…
Post summary
A critical access control vulnerability (CVE-2017-3419) was found in Oracle E‑Business Suite 12.1.3, but no exploits, patches, or PoC were referenced.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oracle | customer_relationship_management_technical_foundation | 12.1.3 | - | - |