CVE-2023-21908

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...

CVE-2023-21904

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...

CVE-2023-21915

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Book/Internal Transfer. Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2023-21903

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Internal Tfr Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acce...

CVE-2023-21903

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Internal Tfr Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acce...

Buffer overflow

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...

CVE-2023-21915

CVE-2023-21915 affects Oracle Banking Payments (Oracle Financial Services Applications), specifically the Book/Internal Transfer component, with affected versions 14.5–14.7. The vulnerability is described as insufficient input validation allowing a low-privilege, network-accessible attacker (via ...

CVE-2023-21908

The CVE-2023-21908 vulnerability affects Oracle Financial Services Applications, specifically the Oracle Banking Virtual Account Management component (OBVAM Trn Journal Domain) in versions 14.5–14.7. It enables a high-privileged attacker with network access via HTTP to compromise OBVAM, with expl...

CVE-2023-21906

CVE-2023-21906 affects Oracle Banking Virtual Account Management (SMS Module) in Oracle Financial Services Applications. Affected versions: 14.5, 14.6, 14.7. An attacker with network access via HTTP and high privileges can exploit this vulnerability, with user interaction required, to perform una...

CVE-2023-21907

CVE-2023-21907 affects Oracle Banking Virtual Account Management (OBVAM Trn Journal Domain) in Oracle Financial Services Applications, specifically versions 14.5–14.7. The issue is a input validation weakness that can be exploited by a high-privilege attacker with network access over HTTP to obta...

CVE-2023-21905

The CVE-2023-21905 entry affects Oracle Banking Virtual Account Management (Routing Hub) in Oracle Financial Services Applications, specifically versions 14.5–14.7. A root cause of the vulnerability is insufficient input validation in the Routing Hub subcomponent, which enables a high-privilege a...

CVE-2023-21903

CVE-2023-21903 affects Oracle Financial Services Applications, specifically the OBVAM Internal Tfr Domain within Oracle Banking Virtual Account Management. Affected versions are 14.5, 14.6 and 14.7. The vulnerability is described as difficult to exploit and requires network access over HTTP by a ...

CVE-2023-21904

CVE-2023-21904 affects Oracle Financial Services Applications, specifically the Oracle Banking Virtual Account Management (OBVAM) Trn Journal Domain. Affected versions: 14.5, 14.6, 14.7. The issue is exploitable by a high-privilege attacker with network access via HTTP and requires user interacti...

Automating Qakbot Detection at Scale With Velociraptor

In this blog, you will learn a practical methodology to extract configuration data from recent Qakbot samples. I will provide some background on Qakbot, then walk through decode themes in an easy to visualize manner. Additionally, I'll share a Velociraptor artifact to detect and automate the deco...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in the OBVAM Trn Journal Domain component of Oracle Financial Services Applications versions...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in the OBVAM Trn Journal Domain component of Oracle Financial Services Applications versions...

PT-2023-2635 · Oracle · Oracle Banking Virtual Account Management

Name of the Vulnerable Software and Affected Versions: Oracle Banking Virtual Account Management versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the OBVAM Trn Journal Domain component. It allows a high-privileged attacker with network access via HT...

PT-2023-2632 · Oracle · Oracle Banking Virtual Account Management

Name of the Vulnerable Software and Affected Versions: Oracle Banking Virtual Account Management versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Routing Hub subcomponent of Oracle Banking Virtual Account Management, part of Oracle Financial...

PT-2023-2639 · Oracle · Oracle Banking Payments

Name of the Vulnerable Software and Affected Versions: Oracle Banking Payments versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Book/Internal Transfer component of Oracle Banking Payments, allowing a remote attacker to gain read, modify, add, or...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in the OBVAM Trn Journal Domain component of Oracle Financial Services Applications versions...