CVE-2017-10175
First published: Tue Aug 08 2017(Updated: )
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iSupport accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle iSupport | =12.1.1 | |
| Oracle iSupport | =12.1.2 | |
| Oracle iSupport | =12.1.3 | |
| Oracle iSupport | =12.2.3 | |
| Oracle iSupport | =12.2.4 | |
| Oracle iSupport | =12.2.5 | |
| Oracle iSupport | =12.2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10175?
CVE-2017-10175 is considered an easily exploitable vulnerability with a low privilege access requirement.
How do I fix CVE-2017-10175?
To mitigate CVE-2017-10175, apply the latest patches provided by Oracle for the affected versions of the Oracle iSupport component.
What versions of Oracle iSupport are affected by CVE-2017-10175?
CVE-2017-10175 affects Oracle iSupport versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6.
Who can exploit CVE-2017-10175?
CVE-2017-10175 can be exploited by low privileged attackers with network access via HTTP.
What impact does CVE-2017-10175 have on Oracle E-Business Suite?
CVE-2017-10175 allows attackers to potentially compromise the integrity and confidentiality of the Oracle E-Business Suite affected installations.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/references
- agent/author
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- vendor/oracle
- canonical/oracle isupport
- version/oracle isupport/12.1.1
- version/oracle isupport/12.1.2
- version/oracle isupport/12.1.3
- version/oracle isupport/12.2.3
- version/oracle isupport/12.2.4
- version/oracle isupport/12.2.5
- version/oracle isupport/12.2.6