CVE-2017-10199

8 documents4 sources
Severity
8.2HIGH
EPSS
1.6%
top 18.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation IlearningOracle Ilearning
Timeline
PublishedAug 8
Latest updateMay 13

Description

Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages). The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iLearning, attacks may significantly impact additional products. Successful attacks of this vulnerabilit…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:NExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-92vj-cr2m-q75p: Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages)↗2022-05-13
▶
CVEList
CVE-2017-10199: Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages)↗2017-08-08
▶

💬Community

2
Bugzilla
CVE-2016-10199 gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full↗2017-02-06
▶
Bugzilla
CVE-2016-10199 CVE-2017-5840 CVE-2017-5841 CVE-2017-5845 gstreamer-plugins-good: various flaws [fedora-all]↗2017-02-06
▶
CVE-2017-10199 (HIGH CVSS 8.2) | Vulnerability in the Oracle iLearni | cvebase.io