Lucene search

[email protected]NVD:CVE-2018-2747

HistoryApr 19, 2018 - 2:29 a.m.

CVE-2018-2747

2018-04-1902:29:01

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

36.6%

JSON

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected configurations

Nvd

Node

oraclebanking_corporate_lendingMatch12.3.0

oraclebanking_corporate_lendingMatch12.4.0

oraclebanking_corporate_lendingMatch12.5.0

oraclebanking_corporate_lendingMatch14.0.0

Node

oraclebanking_paymentsMatch12.3.0

oraclebanking_paymentsMatch12.4.0

oraclebanking_paymentsMatch12.5.0

oraclebanking_paymentsMatch14.0.0

Node

oracleflexcube_enterprise_limits_and_collateral_managementMatch12.3.0

oracleflexcube_enterprise_limits_and_collateral_managementMatch14.0.0

Node

oracleflexcube_investor_servicingMatch12.0.4

oracleflexcube_investor_servicingMatch12.1.0

oracleflexcube_investor_servicingMatch12.3.0

oracleflexcube_investor_servicingMatch12.4.0

Node

oracleflexcube_universal_bankingMatch11.3.0

oracleflexcube_universal_bankingMatch11.4.0

oracleflexcube_universal_bankingMatch12.0.1

oracleflexcube_universal_bankingMatch12.0.2

oracleflexcube_universal_bankingMatch12.0.3

oracleflexcube_universal_bankingMatch12.1.0

oracleflexcube_universal_bankingMatch12.2.0

oracleflexcube_universal_bankingMatch12.3.0

oracleflexcube_universal_bankingMatch12.4.0

oracleflexcube_universal_bankingMatch14.0.0

VendorProductVersionCPE
oraclebanking_corporate_lending12.3.0cpe:2.3:a:oracle:banking_corporate_lending:12.3.0:*:*:*:*:*:*:*
oraclebanking_corporate_lending12.4.0cpe:2.3:a:oracle:banking_corporate_lending:12.4.0:*:*:*:*:*:*:*
oraclebanking_corporate_lending12.5.0cpe:2.3:a:oracle:banking_corporate_lending:12.5.0:*:*:*:*:*:*:*
oraclebanking_corporate_lending14.0.0cpe:2.3:a:oracle:banking_corporate_lending:14.0.0:*:*:*:*:*:*:*
oraclebanking_payments12.3.0cpe:2.3:a:oracle:banking_payments:12.3.0:*:*:*:*:*:*:*
oraclebanking_payments12.4.0cpe:2.3:a:oracle:banking_payments:12.4.0:*:*:*:*:*:*:*
oraclebanking_payments12.5.0cpe:2.3:a:oracle:banking_payments:12.5.0:*:*:*:*:*:*:*
oraclebanking_payments14.0.0cpe:2.3:a:oracle:banking_payments:14.0.0:*:*:*:*:*:*:*
oracleflexcube_enterprise_limits_and_collateral_management12.3.0cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.3.0:*:*:*:*:*:*:*
oracleflexcube_enterprise_limits_and_collateral_management14.0.0cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:14.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	banking_corporate_lending	12.3.0	cpe:2.3:a:oracle:banking_corporate_lending:12.3.0:::::::*
oracle	banking_corporate_lending	12.4.0	cpe:2.3:a:oracle:banking_corporate_lending:12.4.0:::::::*
oracle	banking_corporate_lending	12.5.0	cpe:2.3:a:oracle:banking_corporate_lending:12.5.0:::::::*
oracle	banking_corporate_lending	14.0.0	cpe:2.3:a:oracle:banking_corporate_lending:14.0.0:::::::*
oracle	banking_payments	12.3.0	cpe:2.3:a:oracle:banking_payments:12.3.0:::::::*
oracle	banking_payments	12.4.0	cpe:2.3:a:oracle:banking_payments:12.4.0:::::::*
oracle	banking_payments	12.5.0	cpe:2.3:a:oracle:banking_payments:12.5.0:::::::*
oracle	banking_payments	14.0.0	cpe:2.3:a:oracle:banking_payments:14.0.0:::::::*
oracle	flexcube_enterprise_limits_and_collateral_management	12.3.0	cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.3.0:::::::*
oracle	flexcube_enterprise_limits_and_collateral_management	14.0.0	cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:14.0.0:::::::*

Rows per page:

1-10 of 241

References

www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

www.securityfocus.com/bid/103844

www.securitytracker.com/id/1040693

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

36.6%

JSON

Related for NVD:CVE-2018-2747

cvelist1 prion1 cve1 oracle1