NVD

Id
84556  
Name
CVE-2017-3545  
Description
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N).  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
7.8  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:C/A:N)  
Pub Date
2017-07-18  
Published
2017-04-24  
Modified Date
2017-07-10  
Seq
2017-3545  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
413845 84556 CVE-2017-5507 [oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413846 84556 CVE-2017-5507 [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413847 84556 CVE-2017-5507 95752  View
413848 84556 CVE-2017-5507 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851382  View
413849 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/blob/6.9.7-4/ChangeLog  View
413850 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/blob/7.0.4-4/ChangeLog  View
413851 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/commit/4493d9ca1124564da17f9b628ef9d0f1a6be9738  View
413852 84556 CVE-2017-5507 [oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413853 84556 CVE-2017-5507 [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413854 84556 CVE-2017-5507 95752  View
413855 84556 CVE-2017-5507 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851382  View
413856 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/blob/6.9.7-4/ChangeLog  View
413857 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/blob/7.0.4-4/ChangeLog  View
413858 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/commit/4493d9ca1124564da17f9b628ef9d0f1a6be9738  View
413859 84556 CVE-2017-5507 [oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413860 84556 CVE-2017-5507 [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413861 84556 CVE-2017-5507 95752  View
413862 84556 CVE-2017-5507 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851382  View
413863 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/blob/6.9.7-4/ChangeLog  View
413864 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/blob/7.0.4-4/ChangeLog  View
413865 84556 CVE-2017-5507 https://github.com/ImageMagick/ImageMagick/commit/4493d9ca1124564da17f9b628ef9d0f1a6be9738  View
417048 84556 CVE-2017-2312 97611  View
417049 84556 CVE-2017-2312 https://kb.juniper.net/JSA10777  View
417050 84556 CVE-2017-2312 97611  View
417051 84556 CVE-2017-2312 https://kb.juniper.net/JSA10777  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67271 JVNDB-2017-003583 Oracle Fusion Middleware の Oracle WebCenter Sites における Blob Server に関する脆弱性 Oracle Fusion Middleware の Oracle WebCenter Sites には、Blob Server に関する処理に不備があるため、機密性、および完全性に影響のある脆弱性が存在します。 CVE-2017-3545 0 CVE-2017-3545 84556 8.5 8.2 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003583.html 2017-04-18 2017-05-31 View