VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Aug 8, 2017· Updated Jun 17, 2026

CVE-2017-10032

CVE-2017-10032

Description

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List). Supported versions that are affected are 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1 and 6.4.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data as well as unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

Affected products

10
  • Oracle Corporation/Transportation Management9 versions
    cpe:2.3:a:oracle:transportation_management:6.3.4.1:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:oracle:transportation_management:6.3.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.4.2:*:*:*:*:*:*:*
    • (no CPE)range: 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1, 6.4.2
    • (no CPE)range: 6.3.4.1
  • Oracle Corporation/Supply Chain Products Suitellm-fuzzy
    Range: 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1, 6.4.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.