CVE-2017-10066
First published: Thu Oct 19 2017(Updated: )
Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Technology Stack accessible data. CVSS 3.0 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle E-Business Suite Technology Stack | =12.1.3 | |
| Oracle E-Business Suite Technology Stack | =12.2.3 | |
| Oracle E-Business Suite Technology Stack | =12.2.4 | |
| Oracle E-Business Suite Technology Stack | =12.2.5 | |
| Oracle E-Business Suite Technology Stack | =12.2.6 | |
| Oracle E-Business Suite Technology Stack | =12.2.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10066?
CVE-2017-10066 is considered to be easily exploitable and poses a significant security risk to affected Oracle E-Business Suite versions.
How do I fix CVE-2017-10066?
To fix CVE-2017-10066, update your Oracle E-Business Suite technology stack to the latest patched version provided by Oracle.
Which versions of Oracle E-Business Suite are affected by CVE-2017-10066?
The affected versions of Oracle E-Business Suite include 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7.
Can CVE-2017-10066 be exploited remotely?
Yes, CVE-2017-10066 allows an unauthenticated attacker with network access to potentially exploit this vulnerability.
What component is impacted by CVE-2017-10066?
CVE-2017-10066 impacts the Oracle Applications Technology Stack component, specifically Oracle Forms.
- agent/type
- agent/softwarecombine
- agent/references
- agent/remedy
- agent/author
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle e-business suite technology stack
- version/oracle e-business suite technology stack/12.1.3
- version/oracle e-business suite technology stack/12.2.3
- version/oracle e-business suite technology stack/12.2.4
- version/oracle e-business suite technology stack/12.2.5
- version/oracle e-business suite technology stack/12.2.6
- version/oracle e-business suite technology stack/12.2.7