NVD

Id
81463  
Name
CVE-2017-3296  
Description
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-02-07  
Published
2017-01-27  
Modified Date
2017-01-30  
Seq
2017-3296  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64741 JVNDB-2017-001127 Oracle Commerce の Oracle Commerce Platform における Dynamo Application Framework に関する脆弱性 Oracle Commerce の Oracle Commerce Platform には、Dynamo Application Framework に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2017-3296 CVE-2017-3296 81463 4.3 4.3 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001127.html 2017-01-17 2017-02-01 View