Attention: To align with new corporate security policies, and to match policies adopted by other communities within Oracle, the My Oracle Support Community access requirements will change beginning September 18, 2025. MOSC will now require that member accounts in our community be associated to a *corporate* email address. This means that users with generic domains (such as gmail.com, yahoo.com, and others) will no longer be granted access to the discussion forums and ideas labs. If this policy affects you, act now to change the email address that is associated with your Oracle (and community) account. Alternatively, you can opt to create a new Oracle account that uses your corporate email domain.

Identity Management (MOSC)

Does CVE-2017-3553 apply to Oracle Access Manager 11.1.2.3?

Jun 2, 2017 2:41PM edited Aug 18, 2017 5:00AM in Identity Management (MOSC) 1 commentAnswered

Hi,

According to: Oracle Critical Patch Update - April 2017

CVE-2017-3553 applies to Oracle Identity Manager

Additionally, Text Form of Oracle Critical Patch Update - April 2017 Risk Matrix says it applies to Oracle Identity Manager as well.

But in https://support.oracle.com/epmos/faces/DocumentDisplay?id=2228898.1 it says it applies to Oracle Identity Manager and Oracle Access Manager.

Would someone be able to confirm if it applies to Oracle Access Manager?

Tagged:

0

Howdy, Stranger!

To view full details, sign in to My Oracle Support Community.

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month