CVE-2017-3274: Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: User Interface).

Security readout for executives and security teams

CVE-2017-3274 is a serious Oracle E-Business Suite Email Center issue. An unauthenticated attacker with HTTP access can trigger it, but success requires another person to interact. A successful attack can expose critical Email Center data and allow some unauthorized data changes, with possible impact beyond Email Center. Exposure is most likely where affected Oracle E-Business Suite Email Center versions are deployed and reachable over HTTP. Internet-facing or broadly accessible internal EBS portals increase urgency. The source bundle does not name specific configurations, CWEs, or prerequisite privileges beyond unauthenticated network access and human interaction. Prioritize remediation for any reachable Oracle E-Business Suite Email Center deployment. The issue can affect critical data confidentiality and integrity without attacker authentication, though it requires user interaction. Business urgency is highest where EBS handles sensitive customer, financial, support, or operational data. Mitigation focus: Review Oracle's January 2017 Critical Patch Update guidance for CVE-2017-3274.; Patch or upgrade affected Oracle E-Business Suite Email Center versions per Oracle guidance.; Restrict HTTP access to Oracle E-Business Suite from untrusted networks where feasible..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.