CVE-2017-3542: High severity Oracle WebCenter Sites vulnerability
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3542?
CVE-2017-3542 is considered to have a high severity due to its exploitability by unauthenticated attackers.
How do I fix CVE-2017-3542?
To fix CVE-2017-3542, it is recommended to apply the latest patch provided by Oracle for affected versions of WebCenter Sites.
Which versions of Oracle WebCenter Sites are affected by CVE-2017-3542?
The versions affected by CVE-2017-3542 include 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0.
What type of access is required to exploit CVE-2017-3542?
Exploitation of CVE-2017-3542 requires network access via HTTP, making it accessible to external attackers.
Can CVE-2017-3542 lead to data breaches?
Yes, CVE-2017-3542 poses a risk of data breaches since it allows unauthenticated attackers to gain access to sensitive information.