Lucene search

[email protected]NVD:CVE-2018-2748

HistoryApr 19, 2018 - 2:29 a.m.

CVE-2018-2748

2018-04-1902:29:01

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

50.3%

JSON

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

Affected configurations

Nvd

Node

oraclebanking_corporate_lendingMatch12.3.0

oraclebanking_corporate_lendingMatch12.4.0

oraclebanking_corporate_lendingMatch12.5.0

oraclebanking_corporate_lendingMatch14.0.0

Node

oraclebanking_paymentsMatch12.3.0

oraclebanking_paymentsMatch12.4.0

oraclebanking_paymentsMatch12.5.0

oraclebanking_paymentsMatch14.0.0

Node

oracleflexcube_enterprise_limits_and_collateral_managementMatch12.3.0

oracleflexcube_enterprise_limits_and_collateral_managementMatch14.0.0

Node

oracleflexcube_investor_servicingMatch12.0.4

oracleflexcube_investor_servicingMatch12.1.0

oracleflexcube_investor_servicingMatch12.3.0

oracleflexcube_investor_servicingMatch12.4.0

Node

oracleflexcube_universal_bankingMatch11.3.0

oracleflexcube_universal_bankingMatch11.4.0

oracleflexcube_universal_bankingMatch12.0.1

oracleflexcube_universal_bankingMatch12.0.2

oracleflexcube_universal_bankingMatch12.0.3

oracleflexcube_universal_bankingMatch12.1.0

oracleflexcube_universal_bankingMatch12.2.0

oracleflexcube_universal_bankingMatch12.3.0

oracleflexcube_universal_bankingMatch12.4.0

oracleflexcube_universal_bankingMatch14.0.0

VendorProductVersionCPE
oraclebanking_corporate_lending12.3.0cpe:2.3:a:oracle:banking_corporate_lending:12.3.0:*:*:*:*:*:*:*
oraclebanking_corporate_lending12.4.0cpe:2.3:a:oracle:banking_corporate_lending:12.4.0:*:*:*:*:*:*:*
oraclebanking_corporate_lending12.5.0cpe:2.3:a:oracle:banking_corporate_lending:12.5.0:*:*:*:*:*:*:*
oraclebanking_corporate_lending14.0.0cpe:2.3:a:oracle:banking_corporate_lending:14.0.0:*:*:*:*:*:*:*
oraclebanking_payments12.3.0cpe:2.3:a:oracle:banking_payments:12.3.0:*:*:*:*:*:*:*
oraclebanking_payments12.4.0cpe:2.3:a:oracle:banking_payments:12.4.0:*:*:*:*:*:*:*
oraclebanking_payments12.5.0cpe:2.3:a:oracle:banking_payments:12.5.0:*:*:*:*:*:*:*
oraclebanking_payments14.0.0cpe:2.3:a:oracle:banking_payments:14.0.0:*:*:*:*:*:*:*
oracleflexcube_enterprise_limits_and_collateral_management12.3.0cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.3.0:*:*:*:*:*:*:*
oracleflexcube_enterprise_limits_and_collateral_management14.0.0cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:14.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	banking_corporate_lending	12.3.0	cpe:2.3:a:oracle:banking_corporate_lending:12.3.0:::::::*
oracle	banking_corporate_lending	12.4.0	cpe:2.3:a:oracle:banking_corporate_lending:12.4.0:::::::*
oracle	banking_corporate_lending	12.5.0	cpe:2.3:a:oracle:banking_corporate_lending:12.5.0:::::::*
oracle	banking_corporate_lending	14.0.0	cpe:2.3:a:oracle:banking_corporate_lending:14.0.0:::::::*
oracle	banking_payments	12.3.0	cpe:2.3:a:oracle:banking_payments:12.3.0:::::::*
oracle	banking_payments	12.4.0	cpe:2.3:a:oracle:banking_payments:12.4.0:::::::*
oracle	banking_payments	12.5.0	cpe:2.3:a:oracle:banking_payments:12.5.0:::::::*
oracle	banking_payments	14.0.0	cpe:2.3:a:oracle:banking_payments:14.0.0:::::::*
oracle	flexcube_enterprise_limits_and_collateral_management	12.3.0	cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.3.0:::::::*
oracle	flexcube_enterprise_limits_and_collateral_management	14.0.0	cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:14.0.0:::::::*

Rows per page:

1-10 of 241

References

www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

www.securityfocus.com/bid/103850

www.securitytracker.com/id/1040693

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

50.3%

JSON

Related for NVD:CVE-2018-2748

cvelist1 cve1 prion1 oracle1