Not rated
CVE-2017-10184 Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless/WAP)
Description
Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless/WAP). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Field Service accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Field Service 12.2 | 12.2.3 → 12.2.6 | No fix stated |
| Field Service 12.1 | 12.1.1 → 12.1.3 | No fix stated |
Other CVEs of Field Service
The 6 CVEs of Field Service →
CVE-2021-2362
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless)
8.1
High
CVE-2020-2603
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless)
6.1
Medium
CVE-2019-2930
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless)
Not rated
CVE-2019-2828
Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless)
Not rated