CVE-2017-10170

CVE-2017-10170 affects Oracle E-Business Suite's Oracle Field Service (Wireless/WAP) subcomponent. Affected versions are 12.1.1, 12.1.2, and 12.1.3. An unauthenticated attacker with network access via HTTP can compromise Field Service; attacks require user interaction. Successful exploitation can...