CVE-2017-3541: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server).

Security readout for executives and security teams

CVE-2017-3541 affects Oracle WebCenter Sites and can let an unauthenticated attacker over HTTP access critical site data and modify some data. For organizations running affected versions, this is a high-priority confidentiality and integrity risk, especially if the application is internet-facing. Exposure is most likely where Oracle WebCenter Sites is deployed and reachable over HTTP, including public websites, intranet publishing platforms, or partner-accessible environments running the affected versions. Treat as urgent for any exposed or business-critical WebCenter Sites deployment because unauthenticated HTTP access could disclose critical content data and enable unauthorized content changes. Prioritize inventory and patch confirmation. Mitigation focus: Identify all Oracle WebCenter Sites instances and affected versions.; Review Oracle April 2017 Critical Patch Update guidance for this CVE.; Apply the vendor-provided security update where applicable..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.