Oracle Retail Open Commerce Platform CVE-2017-3451 Remote Security Vulnerability

Bugtraq ID:	97741
Class:	Unknown
CVE:	CVE-2017-3451
Remote:	Yes
Local:	No
Published:	Apr 18 2017 12:00AM
Updated:	Apr 18 2017 11:41PM
Credit:	Oracle
Vulnerable:	Oracle Retail Open Commerce Platform 6.1 Oracle Retail Open Commerce Platform 6.0 Oracle Retail Open Commerce Platform 5.3 Oracle Retail Open Commerce Platform 5.1 Oracle Retail Open Commerce Platform 5.0 Oracle Retail Open Commerce Platform 4.0 Oracle Retail Open Commerce Platform 16.0 Oracle Retail Open Commerce Platform 15.0
Not Vulnerable:

Oracle Retail Open Commerce Platform CVE-2017-3451 Remote Security Vulnerability

Oracle Retail Open Commerce Platform is prone to a remote security vulnerability in Oracle Retail Open Commerce Platform.

The vulnerability can be exploited over the 'HTTP' protocol. The 'Web' sub component is affected.

This vulnerability affects the following supported versions:
4.0, 5.0, 5.1, 5.3, 6.0, 6.1, 15.0, 16.0

Oracle Retail Open Commerce Platform CVE-2017-3451 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Retail Open Commerce Platform CVE-2017-3451 Remote Security Vulnerability

References:

• Oracle Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - April 2017 (Oracle)