PT-2017-15989
CVE-2017-3555
·
Published
2017-04-24
·
Updated
2019-10-03
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6
Description
The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables, resulting in the ability to cause a hang or frequently repeatable crash of Oracle iReceivables.
Recommendations
For versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾