PT-2013-3717

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software versions 2.8.0 through 12.0.1 Description The issue affects confidentiality and is related to the BASE component in the Oracle FLEXCUBE Direct Banking component. It allows local users to exploit the...

PT-2013-3227

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software versions 2.8.0 through 12.0.1 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via vectors related to BASE in the Oracle FLEXCUBE Direct Banking...

CVE-2013-1505: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE...

PT-2013-3712

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software versions 2.8.0 through 4.1.0 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to My Services in the Oracle FLEXCUBE Direct Banking...

PT-2013-3241

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software FLEXCUBE Direct Banking versions 2.8.0 through 4.1.0 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via vectors related to HELP. Recommendations F...

CVE-2013-2379: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows remote authenticated users to affect integrity via unknown vectors related to RT...

CVE-2013-1533: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0, 5.1.0, 5.2.0, 5.3.1 through 5.3.3, and 6.0.1 through 12.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE...

CVE-2013-1546: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0 and 5.0.2 through 12.0.1 allows local users to affect confidentiality via vectors related to BASE...

CVE-2013-2385: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via vectors related to BASE, a different vulnerability than CVE-2013-1560...

CVE-2013-2377: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via unknown vectors related to My Services...

CVE-2013-1549: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 5.3.3, 6.0.1, and 12.0.0 allows remote authenticated users to affect integrity via vectors related to BASE...

PT-2013-3216

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software versions 2.8.0 through 4.1.0 Oracle Financial Services Software version 5.1.0 Oracle Financial Services Software version 5.2.0 Oracle Financial Services Software version 5.3.4 Oracle Financial Services Softwa...

CVE-2013-1560: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality via vectors related to BASE, a different vulnerability than CVE-2013-2385...

CVE-2013-2382: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows local users to affect confidentiality via vectors related to BASE...

CVE-2013-1541: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0, 5.0.2 through 5.0.5, and 5.3.0 through 5.3.4 allows remote authenticated users to affect confidentiality via vectors related to BASE...

PT-2013-3228

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 2.8.0 through 5.3.3 Oracle FLEXCUBE Direct Banking version 6.0.1 Oracle FLEXCUBE Direct Banking version 12.0.0 Description The issue affects the integrity of the system, allowing remote authenticated use...

PT-2013-3226

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software FLEXCUBE Direct Banking versions 2.8.0 through 3.1.0 Oracle Financial Services Software FLEXCUBE Direct Banking versions 5.0.2 through 12.0.1 Description The issue affects confidentiality and is related to th...

CVE-2013-2387: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 4.1.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE...

CVE-2013-1556: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows remote authenticated users to affect integrity via vectors related to OTH...

Shylock Trojan Going Global with New Features, Resilient Infrastructure

The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report. To this point, Shylock has made its money via man-in-the-browser attack...