CVE-2017-10166

4 documents4 sources
Severity
3.7LOW
EPSS
0.8%
top 25.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle Corporation Security ServiceOracle Security ServiceOracle Security Service FMW
Timeline
PublishedOct 19
Latest updateMay 13

Description

Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API). Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Security Service accessible data. CVSS 3.0 Base Score 3.…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages3 packages

▶NVDoracle/security_service12.1.3.0.0
▶CVEListV5oracle_corporation/security_service12.1.3.0.0, FMW: 11.1.1.9.0+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-43cg-vjjq-q598: Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API)↗2022-05-13
▶
CVEList
CVE-2017-10166: Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API)↗2017-10-19
▶

💬Community

1
Bugzilla
CVE-2016-10166 gd: Unsigned integer underflow _gdContributionsAlloc()↗2017-02-03
▶
CVE-2017-10166 (LOW CVSS 3.7) | Vulnerability in the Oracle Securit | cvebase.io