CVE-2017-3545: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server).

Security readout for executives and security teams

CVE-2017-3545 affects Oracle WebCenter Sites Blob Server. An unauthenticated attacker reaching the service over HTTP could change or delete critical site data and read some data. For organizations still running affected versions, this is a high business risk because it targets content integrity without requiring credentials. Exposure is limited to Oracle WebCenter Sites deployments on the affected versions, especially where Blob Server functionality is reachable over HTTP from untrusted networks. Internet-facing or partner-facing WebCenter Sites environments should be prioritized. Treat as high priority for any active WebCenter Sites deployment on listed versions. The risk is unauthorized content or critical data modification, which can affect public trust, site operations, and downstream business processes. Mitigation focus: Review Oracle April 2017 CPU guidance for WebCenter Sites fixes.; Upgrade or patch affected WebCenter Sites versions per Oracle guidance.; Restrict HTTP access to WebCenter Sites administrative and Blob Server surfaces..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.