CVE-2017-3543: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server).

Security readout for executives and security teams

CVE-2017-3543 affects Oracle WebCenter Sites and can be reached remotely over HTTP without authentication. A successful attacker could access critical site data, modify some data, and cause partial service disruption. This is business-significant for any exposed WebCenter Sites deployment. Exposure is most likely where affected Oracle WebCenter Sites versions are reachable over HTTP, especially internet-facing portals or partner-accessible environments. Treat this as high priority if Oracle WebCenter Sites is deployed. The vulnerability is unauthenticated, network-reachable, and can expose critical data, so exposed systems should be patched or isolated promptly. Mitigation focus: Confirm whether any WebCenter Sites deployment runs an affected version.; Review Oracle's April 2017 CPU guidance for the applicable WebCenter Sites fix.; Restrict HTTP access to trusted networks until remediation is complete..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.