CVE-2017-10154

CWE-200 — Information Exposure5 documents4 sources
Severity
5.3MEDIUM
EPSS
0.5%
top 33.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Access ManagerOracle Access Manager
Timeline
PublishedOct 19
Latest updateMay 17

Description

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Access Manager accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDoracle/access_manager11.1.2.3.0
▶CVEListV5oracle_corporation/access_manager11.1.2.3.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5r8g-rpf6-gvw3: Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)↗2022-05-17
▶
CVEList
CVE-2017-10154: Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)↗2017-10-19
▶

💬Community

1
Bugzilla
CVE-2016-10154 kernel: smbencrypt() points a scatterlist to the stack causing DoS↗2017-01-24
▶