CVE-2017-3597: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).

Security readout for executives and security teams

CVE-2017-3597 affects Oracle WebCenter Sites. A low-privileged authenticated attacker with HTTP access could, with another user's interaction, gain unauthorized access to critical or all accessible WebCenter Sites data. The known impact is data confidentiality, not system takeover, data modification, or outage. Exposure is most likely where affected Oracle WebCenter Sites versions are reachable over HTTP and low-privileged accounts exist. Internet-facing or broadly reachable administrative interfaces increase concern. Treat as a moderate-priority confidentiality risk. Prioritize if WebCenter Sites stores sensitive content, is externally reachable, or has many low-privileged users. Mitigation focus: Confirm whether Oracle WebCenter Sites is running an affected version.; Review Oracle April 2017 CPU or current Oracle guidance for required updates.; Restrict HTTP access to WebCenter Sites administrative and Advanced UI interfaces..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.