CVE-2017-10113: Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM Use...

Security readout for executives and security teams

CVE-2017-10113 affects Oracle Common Applications within Oracle E-Business Suite. An unauthenticated attacker with HTTP network access could, with user interaction, gain broad access to sensitive application data and limited ability to change data. The source rates it CVSS 8.2, so exposure should be treated as high business risk. Exposure is most likely in organizations running the listed Oracle E-Business Suite versions with Oracle Common Applications reachable over HTTP. The source bundle does not prove internet exposure, but network-reachable deployments are in scope. Human interaction by someone other than the attacker is required. Prioritize remediation for affected Oracle E-Business Suite systems that handle sensitive business or customer data. The main risk is unauthorized access to critical data, with some unauthorized data modification possible. No active exploitation is shown in the supplied sources. Mitigation focus: Review Oracle July 2017 Critical Patch Update guidance for this CVE.; Apply the relevant Oracle E-Business Suite security updates where applicable.; Confirm affected versions are not exposed through unnecessary HTTP access paths..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.