CVE-2017-10033
First published: Thu Oct 19 2017(Updated: )
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. Note: Please refer to Doc ID <a href="http://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=2318213.1">My Oracle Support Note 2318213.1 for instructions on how to address this issue. CVSS 3.0 Base Score 4.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle WebCenter Sites | =11.1.1.8.0 | |
| Oracle WebCenter Sites | =12.2.1.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10033?
CVE-2017-10033 is considered a difficult-to-exploit vulnerability that may allow unauthorized access to Oracle WebCenter Sites.
How do I fix CVE-2017-10033?
The recommended fix for CVE-2017-10033 is to apply the latest security patches provided by Oracle for the affected versions.
Which versions are affected by CVE-2017-10033?
CVE-2017-10033 affects Oracle WebCenter Sites versions 11.1.1.8.0 and 12.2.1.2.0.
Can an unauthenticated attacker exploit CVE-2017-10033?
Yes, CVE-2017-10033 allows an unauthenticated attacker with access to the infrastructure to potentially exploit the vulnerability.
What type of component is affected by CVE-2017-10033?
CVE-2017-10033 impacts the Support Tools component of the Oracle WebCenter Sites within Oracle Fusion Middleware.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/author
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle webcenter sites
- version/oracle webcenter sites/11.1.1.8.0
- version/oracle webcenter sites/12.2.1.2.0