CVE-2017-3423

CVE-2017-3423 is a high-severity vulnerability affecting Oracle One-to-One Fulfillment versions 12.1.1 through 12.2.6. This easily exploitable vulnerability allows an unauthenticated attacker to compromise the system via HTTP, requiring user interaction to succeed. Successful exploitation can lead to unauthorized access to critical data, including complete data access, and unauthorized data modification within Oracle One-to-One Fulfillment. The CVSS v3.0 Base Score is 8.2 (HIGH), indicating significant confidentiality and integrity impacts. The attack vector is network-based with low attack complexity, but user interaction is required. While the vulnerability is in Oracle One-to-One Fulfillment, successful attacks may significantly impact additional products. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness or attention.