CVE-2017-3425 is an easily exploitable vulnerability in Oracle One-to-One Fulfillment versions 12.1.1 through 12.2.6, allowing unauthenticated attackers with network HTTP access to compromise the system. This high-severity vulnerability (CVSS 8.2) requires user interaction and can lead to unauthorized access, modification, or deletion of critical data within Oracle One-to-One Fulfillment, potentially impacting other products. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.1.1CPE matchmatch criteria | cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.1:*:*:*:*:*:*:* | ||
12.1.2CPE matchmatch criteria | cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.2:*:*:*:*:*:*:* | ||
12.1.3CPE matchmatch criteria | cpe:2.3:a:oracle:one-to-one_fulfillment:12.1.3:*:*:*:*:*:*:* | ||
12.2.3CPE matchmatch criteria | cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.3:*:*:*:*:*:*:* | ||
12.2.4CPE matchmatch criteria | cpe:2.3:a:oracle:one-to-one_fulfillment:12.2.4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.