CVE-2017-3528
43Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 15%
da publicação à arma266 dias
Publicada no NVD24 de abr.
1ª PoC+266d
probabilidade de exploração
15%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).
Produtos afetados
Oracle Corporation · Applications FrameworkPoCs públicas encontradas — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43592cve_referencewww.exploit-db.com/exploits/43592/não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.