CVE-2018-2614

CVE-2018-2614 affects Oracle FLEXCUBE Universal Banking (Infrastructure) within Oracle Financial Services Applications. Vulnerable are 11.3.0, 11.4.0, 12.0.1–12.4.0. The flaw is described as a difficult‑to‑exploit issue allowing a low‑privileged, network‑connected attacker (via HTTP) to access or...

CVE-2018-2649

CVE-2018-2649 details (NORMAL): Affects Oracle FLEXCUBE Universal Banking, part of Oracle Financial Services Applications (Infrastructure subcomponent). Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0. The vulnerability allows a low-privilege attacker wit...

CVE-2018-2630

CVE-2018-2630 affects Oracle FLEXCUBE Universal Banking (Security Management System subcomponent). Affected versions: 11.5.0, 11.6.0, 11.7.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise data: unauthorized update/insert/delete of some data and una...

CVE-2018-2674

CVE-2018-2674 affects Oracle FLEXCUBE Direct Banking (Logoff) in Oracle Financial Services Applications, specifically 12.0.2 and 12.0.3. The vulnerability permits an unauthenticated attacker with network access via HTTP to compromise the Direct Banking component, with attacks requiring human inte...

CVE-2018-2674

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2648

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low...

CVE-2018-2706

CVE-2018-2706 affects Oracle Banking Corporate Lending (Oracle Financial Services Applications), Core module. Affected versions: 12.3.0 and 12.4.0. An attacker with network access via HTTP and low privileges can compromise the component, potentially leading to takeover and impacting confidentiali...

CVE-2018-2709

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2706

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2018-2704

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2018-2630

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Security Management System. Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2614

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows lo...

CVE-2018-2648

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low...

CVE-2018-2705

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2018-2709

CVE-2018-2709 affects the Oracle Banking Corporate Lending Core module of Oracle Financial Services Applications , with impacted versions 12.3.0 and 12.4.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data confidentiality, per CVSSv3.0 base score...

CVE-2018-2708

CVE-2018-2708 affects the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Affected versions are 12.3.0 and 12.4.0. The vulnerability is described as difficult to exploit but allows a low-privileged attacker with network access via HTTP to...

CVE-2018-2709

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2630

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Security Management System. Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2649

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low...

CVE-2018-2706

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...