CVE-2020-2722

Oracle FLEXCUBE Investor Servicing (Infrastructure) is affected in versions 12.1.0–12.4.0 and 14.0.0–14.1.0. The issue relates to inadequate access controls, allowing an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized upd...

CVE-2020-2721

CVE-2020-2721 describes a vulnerability in Oracle FLEXCUBE Investor Servicing (Infrastructure). Affected versions are 12.1.0-12.4.0 and 14.0.0-14.1.0. The issue allows a low-privileged attacker who can access the system over HTTP to compromise Oracle FLEXCUBE Investor Servicing, potentially leadi...

CVE-2020-2716

The CVE-2020-2716 entry concerns Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions are 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability enables a low-privileged, network-accessible attacker to compromise the system via HTTP, potentially lea...

CVE-2020-2724

CVE-2020-2724 affects Oracle FLEXCUBE Investor Servicing (Oracle Financial Services Applications), specifically the Infrastructure component. AFFECTED VERSIONS: 12.1.0–12.4.0 and 14.0.0–14.1.0. ROOT CAUSE: a low-privilege, network-accessible (HTTP) vulnerability that can lead to unauthorized read...

CVE-2020-2710

Oracle Banking Payments (Oracle Financial Services Applications, Core) is affected in versions 14.1.0–14.3.0. A low-privilege, network-based attacker with HTTP access can compromise data confidentiality and integrity. CVSSv3.0 base score is 5.4 (C:L, I:L; A:N; PR:L; AV:N). The connected documents...

CVE-2020-2716

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2717

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2723

The CVE-2020-2723 entry relates to Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.1.0–12.4.0 and 14.0.0–14.1.0. The vulnerability permits a low-privileged, network-accessible attacker over HTTP to gain unauthorized access to sensitive data and potentially perform un...

CVE-2020-2688

CVE-2020-2688 affects Oracle Financial Services Analytical Applications Infrastructure (OFSAI) in the Object Migration component. Affected versions are 8.0.4–8.0.8. The issue allows a low-privilege attacker with network access over HTTP to gain unauthorized access to data or perform unauthorized ...

CVE-2020-2688

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Object Migration. Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-2700

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2020-2697

CVE-2020-2697 affects Oracle Hospitality Suites Management (Oracle Food and Beverage Applications), specifically versions 3.7 and 3.8. The vulnerability is a local/physical-access issue that can lead to unauthorized data access and possible data modification, with CVSS 3.0 base score 4.9 (C:H, I:...

CVE-2020-2700

CVE-2020-2700 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.0.1–12.4.0 and 14.0.0–14.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to read a subset of data from the system. The root cause and exact vulnerable component ...

CVE-2020-2683

The CVE-2020-2683 entry concerns Oracle FLEXCUBE Universal Banking (Oracle Financial Services Applications), specifically the Infrastructure component. Affected versions are 12.0.1–12.4.0 and 14.0.0–14.3.0. The vulnerability allows a low-privileged, network-attached attacker (HTTPS) to read and m...

CVE-2020-2650

CVE-2020-2650 affects Oracle Retail Customer Management and Segmentation Foundation, Promotions component, version 16.0. The vulnerability allows an unauthenticated attacker, over HTTP, with network access to the affected system to perform unauthorized update/insert/delete operations and read acc...

CVE-2020-2648

CVE-2020-2648 concerns Oracle Retail Customer Management and Segmentation Foundation (Internal Operations) 16.0. The vulnerability affects the product’s Internal Operations component; exploitation requires physical access and can lead to takeover of the Oracle Retail Foundation per CVSS 3.0 (Vect...

CVE-2020-2650

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2649

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2020-2649

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2020-2599

Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications component: MMS All. The supported version that is affected is 7.30.567. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality Cruise Materials...