CVE-2017-3555

CWE-770 — Allocation without Limits3 documents3 sources

Severity

7.5HIGH

EPSS

2.9%

top 13.71%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Ireceivables Oracle Ireceivables

Timeline

PublishedApr 24

Latest updateMay 13

Description

Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle iReceiva…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDoracle/ireceivables7 versions+6

▶CVEListV5oracle_corporation/ireceivables7 versions+6

🔴Vulnerability Details

GHSA

GHSA-7qv2-pj4m-ggp9: Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration)↗2022-05-13

▶

CVEList

CVE-2017-3555: Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration)↗2017-04-24

▶