CVE-2017-3368

CVE-2017-3368 affects Oracle E-Business Suite’s Oracle iStore (Address Book) across 12.1.1–12.2.6. An unauthenticated attacker with network access via HTTP can compromise iStore; successful exploits require user interaction. The vulnerability grants access to critical Oracle iStore data and may a...