CVE-2017-3285

CVE-2017-3285 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (User Interface). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Service Fulfillment Manager, wi...