CVE-2017-3595: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).

Security readout for executives and security teams

Oracle WebCenter Sites had an Advanced UI vulnerability where a low-privileged user with HTTP access could read critical data and make some unauthorized data changes. This is a serious business risk for affected WebCenter Sites deployments because it threatens confidentiality and integrity of site-managed content and data. Exposure is most likely where affected Oracle WebCenter Sites versions are deployed and reachable over HTTP by authenticated low-privileged users. Internet-facing or broadly reachable internal deployments carry higher operational risk. Prioritize remediation for any affected WebCenter Sites deployment that stores sensitive content or is reachable by many authenticated users. The main concern is unauthorized access to critical data, with some integrity impact. Mitigation focus: Identify all Oracle WebCenter Sites instances and versions.; Review Oracle April 2017 Critical Patch Update guidance for CVE-2017-3595.; Apply the applicable Oracle-supported update or mitigation guidance..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.