Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-3555

Опубликовано: 24 апр. 2017
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle iReceivables. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:ireceivables:12.1.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:ireceivables:12.1.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:ireceivables:12.1.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:ireceivables:12.2.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:ireceivables:12.2.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:ireceivables:12.2.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:ireceivables:12.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 86%
0.02878
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle iReceivables. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

EPSS

Процентиль: 86%
0.02878
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770