Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3485

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit vulnerability allows low...

CVE-2017-3485

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit vulnerability allows low...

CVE-2017-3477

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-3482

CVE-2017-3482 describes a vulnerability in the Oracle FLEXCUBE Universal Banking Infrastructure subcomponent of Oracle Financial Services Applications. Affects supported versions 12.0.0 through 12.3.0. The issue is exploitable by a low-privilege, network-accessible attacker via HTTP, with human i...

CVE-2017-3480

CVE-2017-3480 concerns Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0 and 12.0.1. The vulnerability is described as easily exploitable by an unauthenticated attacker with network access via HTTP to th...

CVE-2017-3495

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3535

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3534

The CVE-2017-3534 vulnerability affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. An attacker with network access via HTTP and low privileges could compromise data confidentiality and gain unauthorized...

CVE-2017-3477

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-3480

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

CVE-2017-3481

CVE-2017-3481 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0 and 12.0.1. The vulnerability is exploitable by a low-privileged attacker over HTTP and can lead to partial denial of service again...

CVE-2017-3481

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access via HT...

CVE-2017-3475

CVE-2017-3475 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous). According to the sources, affected versions are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to impact availability, enabling a p...

CVE-2017-3495

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3477

The CVE-2017-3477 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in Oracle Financial Services Applications, specifically versions 12.0.0 and 12.1.0. The CNVD entry states an attacker could exploit the issue to unauthorizedly read, update, insert, or delete dat...

CVE-2017-3473

The CVE-2017-3473 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in versions 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The issue arises from a vulnerability in the Oracle FLEXCUBE Private Banking implementation that allows a low-privileged, network-accessible attacker...

CVE-2017-3534

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attacker wi...

CVE-2017-3479

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3471

CVE-2017-3471 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and, per the description and CV...