NVD

Id
84560  
Name
CVE-2017-3549  
Description
Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Scripting accessible data as well as unauthorized access to critical data or complete access to all Oracle Scripting accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-04-24  
Modified Date
2017-07-10  
Seq
2017-3549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
413932 84560 CVE-2017-5511 [oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413933 84560 CVE-2017-5511 [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413934 84560 CVE-2017-5511 95746  View
413935 84560 CVE-2017-5511 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374  View
413936 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790  View
413937 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42  View
413938 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/issues/347  View
413939 84560 CVE-2017-5511 [oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413940 84560 CVE-2017-5511 [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413941 84560 CVE-2017-5511 95746  View
413942 84560 CVE-2017-5511 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374  View
413943 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790  View
413944 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42  View
413945 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/issues/347  View
413946 84560 CVE-2017-5511 [oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413947 84560 CVE-2017-5511 [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors  View
413948 84560 CVE-2017-5511 95746  View
413949 84560 CVE-2017-5511 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374  View
413950 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790  View
413951 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42  View
413952 84560 CVE-2017-5511 https://github.com/ImageMagick/ImageMagick/issues/347  View
417064 84560 CVE-2017-2317 97652  View
417065 84560 CVE-2017-2317 https://kb.juniper.net/JSA10783  View
417066 84560 CVE-2017-2317 97652  View
417067 84560 CVE-2017-2317 https://kb.juniper.net/JSA10783  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67168 JVNDB-2017-003480 Oracle E-Business Suite の Oracle Scripting における Scripting Administration に関する脆弱性 Oracle E-Business Suite の Oracle Scripting には、Scripting Administration に関する処理に不備があるため、機密性、および完全性に影響のある脆弱性が存在します。 CVE-2017-3549 0 CVE-2017-3549 84560 7.5 9.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003480.html 2017-04-18 2017-05-29 View