CVE-2017-10066: Medium severity oracle e-business suite vulnerability
Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Technology Stack accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10066?
CVE-2017-10066 is considered to be easily exploitable and poses a significant security risk to affected Oracle E-Business Suite versions.
How do I fix CVE-2017-10066?
To fix CVE-2017-10066, update your Oracle E-Business Suite technology stack to the latest patched version provided by Oracle.
Which versions of Oracle E-Business Suite are affected by CVE-2017-10066?
The affected versions of Oracle E-Business Suite include 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7.
Can CVE-2017-10066 be exploited remotely?
Yes, CVE-2017-10066 allows an unauthenticated attacker with network access to potentially exploit this vulnerability.
What component is impacted by CVE-2017-10066?
CVE-2017-10066 impacts the Oracle Applications Technology Stack component, specifically Oracle Forms.