VYPR
Get started
← All advisories
Medium severity6.1NVD Advisory· Published Apr 24, 2017· Updated May 13, 2026

CVE-2017-3530

CVE-2017-3530

Description

Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.0, 6.4.1 and 6.4.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Transportation Manager accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N).

Affected products

13
  • Oracle Corporation/Transportation Management12 versions
    cpe:2.3:a:oracle:transportation_management:6.2:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:oracle:transportation_management:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.6:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:transportation_management:6.4.2:*:*:*:*:*:*:*
  • Oracle Corporation/Transportation Managementv5
    Range: 6.2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.