CVE-2017-10278

CVE-2017-10278 is a vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware, specifically affecting versions 11.1.1, 12.1.1, 12.1.3, and 12.2.2. This vulnerability, with a CVSS 3.0 Base Score of 7.0 (High), allows an unauthenticated attacker with network access via Jolt to compromise the system. While difficult to exploit, successful attacks can lead to unauthorized access to critical or all accessible data, unauthorized data modification, and partial denial of service. There is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, though it has garnered some community discussion and media coverage.