CVE-2017-10175
published 2017-08-08CVE-2017-10175: Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2…
PriorityP423medium4.3CVSS 3.0
AVNACLPRLUINSUCLINAN
EPSS
1.40%
69.5th percentile
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iSupport accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | isupport | — | — |
| oracle | isupport | — | — |
| oracle | isupport | — | — |
| oracle | isupport | — | — |
| oracle | isupport | — | — |
| oracle | isupport | — | — |
| oracle | isupport | — | — |
| oracle_corporation | isupport | — | — |
| oracle_corporation | isupport | — | — |
| oracle_corporation | isupport | — | — |
| oracle_corporation | isupport | — | — |
| oracle_corporation | isupport | — | — |
| oracle_corporation | isupport | — | — |
| oracle_corporation | isupport | — | — |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak
suricata·2017-02-02·CVSS 9.8
CVE-2016-10175 [CRITICAL] ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak
ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak
Rule: alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak"; flow:established,to_server; http.uri; content:"/BRS_netgear_success.html"; nocase; reference:cve,2016-10175; reference:url,cve.circl.lu/cve/CVE-2016-10175; classtype:attempted-recon; sid:2023830; rev:4; metadata:affected_product Netgear_Router, attack_target Client_Endpoint, created_at 2017_02_02, cve CVE_2016_10175, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Major, updated_at 2024_03_07;)
No public exploits indexed.
No writeups or analysis indexed.
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlhttp://www.securityfocus.com/bid/99717http://www.securitytracker.com/id/1038926http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlhttp://www.securityfocus.com/bid/99717http://www.securitytracker.com/id/1038926
2017-08-08
Published