Lucene search

K
cve[email protected]CVE-2017-10166
HistoryOct 19, 2017 - 5:29 p.m.

CVE-2017-10166

2017-10-1917:29:01
web.nvd.nist.gov
24
cve-2017-10166
oracle
security service
fusion middleware
vulnerability
ssl
api
unauthorized access
cvss
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

3.5 Low

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.5%

Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API). Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Security Service accessible data. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Affected configurations

Vulners
NVD
Node
oraclesecurity_serviceRange11.1.1.9.0
OR
oraclesecurity_serviceRange12.1.3.0.0
VendorProductVersionCPE
oraclesecurity_service*cpe:2.3:a:oracle:security_service:*:*:*:*:*:*:*:*
oraclesecurity_service*cpe:2.3:a:oracle:security_service:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Security Service",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "FMW: 11.1.1.9.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0.0"
      }
    ]
  }
]

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

3.5 Low

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.5%

Related for CVE-2017-10166