CVE-2018-3025

CVE-2018-3025 is a vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (Payments Core). Affected versions are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. The flaw is exploitable by a low-privilege attacker over HTTP with network access, leading to poten...

CVE-2018-3024

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3042

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2896

CVE-2018-2896 affects the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent Payments Core). Affected supported versions are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. The vulnerability is exploitable by an unauthenticated attacker with network access via HT...

CVE-2018-3048

CVE-2018-3048 affects Oracle Financial Services Applications, Banking Corporate Lending (Core module). Affected versions: 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.1.0. Vulnerability allows a low-privileged attacker with network access via HTTP, with user interaction, to perform unauthorized update/inse...

CVE-2018-3020

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3027

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3027

CVE-2018-3027 affects Oracle Banking Payments (Oracle Financial Services Applications, Payments Core) and targets multiple supported versions: 12.2.0, 12.3.0, 12.4.0, 12.5.0, and 14.1.0. The vulnerability enables a low-privilege attacker with network access over HTTP to compromise Oracle Banking ...

CVE-2018-3025

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access v...

CVE-2018-3042

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2974

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-3036

CVE-2018-3036 affects Oracle Financial Services Applications’ Banking Corporate Lending component (Core). Affected versions: 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.1.0. The CNVD entry attributes the issue to an access-control error; NVD details describe unauthorized read, update, insert/delete, and p...

CVE-2018-3044

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-3038

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-3038

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2895

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2899

CVE-2018-2899 describes a vulnerability in the Oracle FLEXCUBE Universal Banking component (subcomponent: Infrastructure) of Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, and 14.1.0. The issue is exploitable with network access via HTTP a...

CVE-2018-3022

CVE-2018-3022 affects Oracle Banking Payments (Payments Core) within Oracle Financial Services Applications. Affected versions are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise the service, enabling a hang o...

CVE-2018-3020

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3044

The CVE-2018-3044 entry applies to the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (Core module). Affected versions are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise...