CVE-2017-3499

🗓️ 24 Apr 2017 19:00:00Reported by oracleType

Vulnerability in Oracle Social Network component of Oracle Fusion Middleware (subcomponent: Android Client). Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Social Network. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Social Network accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts)

Reporter	Title	Published	Views	Family All 7
CNVD	Oracle Social Network Information Disclosure Vulnerability	24 Apr 201700:00	–	cnvd
Cvelist	CVE-2017-3499	24 Apr 201719:00	–	cvelist
EUVD	EUVD-2017-12620	7 Oct 202500:30	–	euvd
NVD	CVE-2017-3499	24 Apr 201719:59	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2017	18 Apr 201700:00	–	oracle
Prion	Code injection	24 Apr 201719:59	–	prion
Vulnrichment	CVE-2017-3499	24 Apr 201719:00	–	vulnrichment

NVD

Vulners

Node

oracle social_networkMatch-

[
  {
    "product": "Social Network",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "lessThan": "11.1.12.0.0 (17019101)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038291
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
securityfocus	www.securityfocus.com/bid/97878

13 May 2026 00:24Current

7High risk

Vulners AI Score7

CVSS 37.5

CVSS 27.8

EPSS0.00896

SSVC