CVE-2017-10091

CVE-2017-10091 is a vulnerability in the UI Framework subcomponent of Oracle Enterprise Manager Base Platform, affecting versions 12.1.0, 13.1.0, and 13.2.0. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the platform. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting data integrity. The vulnerability has a CVSS 3.0 Base Score of 7.7 (High), indicating a network attack vector with low attack complexity and no user interaction required. While it does not impact confidentiality or availability, it has a high impact on integrity, potentially affecting additional products beyond the Base Platform. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Its EPSS score is low, suggesting a minimal likelihood of exploitation in the wild.