CVE-2023-22117

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2023-22122

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-22125

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

Buffer overflow

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access v...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2023-22125

Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications is affected for versions 14.5–14.7. The vulnerability arises from insufficient input validation, enabling a remote attacker with network access over HTTP and low privileges to access data with read, update, in...

CVE-2023-22123

CVE-2023-22123 affects Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications, specifically versions 14.5–14.7. Root cause: insufficient input validation allowing a low-privileged attacker with network access via HTTP to compromise the system. Impact includes unau...

CVE-2023-22124

CVE-2023-22124 affects Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications, specifically versions 14.5–14.7. The issue stems from insufficient input validation in the Infrastructure component, enabling a low-privileged attacker who can reach the system over HTT...

CVE-2023-22121

Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications is affected for versions 14.5–14.7. The vulnerability allows an unauthenticated attacker with network access via HTTP, after user interaction, to modify or read data (unauthorized update/insert/delete and read...

CVE-2023-22122

Oracle Banking Trade Finance (Infrastructure component) in Oracle Financial Services Applications, versions 14.5–14.7, is affected. The root cause is insufficient input validation in the Infrastructure layer, allowing a low-privileged attacker with HTTP network access to compromise the system, wi...

CVE-2023-22118

CVE-2023-22118 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.3, 12.4, 14.0–14.3 and 14.5–14.7. Vulnerability allows a low‑privileged attacker with network access via HTTP, with required user interaction, to modify/read data and cause a partial DOS. Mitigatio...

CVE-2023-22117

CVE-2023-22117 affects Oracle FLEXCUBE Universal Banking (Infrastructure component). Vulnerable versions: 12.3, 12.4, 14.0–14.3, and 14.5–14.7. Root cause cited in connected sources: insufficient input validation in the Infrastructure component, enabling a low-privileged attacker with network acc...

CVE-2023-22119

The CVE affects Oracle FLEXCUBE Universal Banking (Infrastructure) in Oracle Financial Services Applications, with affected versions 12.3, 12.4, 14.0–14.3 and 14.5–14.7. The underlying issue is insufficient input validation, allowing a low-privileged attacker with network access via HTTP to compr...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and estate management. A security vulnerability exists in Oracle Banking Trade Finance version 14.5-14.7 of Oracle Financial Services Applications,...

PT-2023-6392 · Oracle · Oracle Flexcube Universal Banking

Name of the Vulnerable Software and Affected Versions: Oracle FLEXCUBE Universal Banking versions 12.3, 12.4, 14.0 through 14.3, 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Universal Banking, allowing a...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and estate management. A security vulnerability exists in Oracle Banking Trade Finance version 14.5-14.7 of Oracle Financial Services Applications,...