CVE-2017-10412

CVE-2017-10412 is a high-severity vulnerability affecting the User Interface subcomponent of Oracle Knowledge Management within Oracle E-Business Suite versions 12.1.1 through 12.2.7. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction to succeed. Successful exploitation can lead to unauthorized access to critical or all accessible data within Oracle Knowledge Management, as well as unauthorized data modification. The vulnerability carries a CVSS 3.0 Base Score of 8.2 (High), indicating significant confidentiality and integrity impacts. Its attack vector is network-based with low attack complexity, but it requires user interaction (UI:R) and has a high scope change (S:C), meaning attacks may impact additional products beyond Oracle Knowledge Management. Despite its high severity, there is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Its EPSS score is very low, suggesting a low probability of exploitation in the wild.