CVE-2016-8309

CVE-2016-8309 is a vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (Core). Affected versions are 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability is triggered by remote, network-accessible HTTP input allowing a low-privilege ...

CVE-2016-8316

CVE-2016-8316 : Vulnerability in the Oracle FLEXCUBE Investor Servicing (Core) component. Affected versions: 12.0.1, 12.0.2, 12.0.4, 12.1.0, 12.3.0. An attacker with network access via HTTP and low privileges can exploit the issue, with user interaction required, to cause unauthorized updates, in...

CVE-2016-8317

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2017-3235

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise...

CVE-2017-3245

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-3297

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Framework. Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-3245

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-3236

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-8303

The CVE-2016-8303 entry describes a vulnerability in Oracle FLEXCUBE Universal Banking (Core). Affected supported versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, and 12.2.0. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the application; succes...

CVE-2016-8308

CVE-2016-8308 affects Oracle FLEXCUBE Private Banking (subcomponent: Product / Instrument Search) in affect versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise data, with successful attacks requiring a user to interact ...

CVE-2016-8324

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8299

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8310

CVE-2016-8310 is a vulnerability in Oracle FLEXCUBE Universal Banking (Core subcomponent) affecting Oracle Financial Services Applications on versions 11.3.0, 11.4.0, 12.0.1–12.2.0. An unauthenticated, network-accessible attacker can exploit HTTP to read, update, insert, or delete data and cause ...

CVE-2016-8311

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8311

CVE-2016-8311 affects Oracle FLEXCUBE Universal Banking (Core) in Oracle Financial Services Applications. Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, potentiall...

CVE-2016-8317

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2016-8316

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

PT-2017-15760

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 and 12.0.3 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking, resulting in unauthorized access to critical data or...

CVE-2017-3245: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2017-15721

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 and 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a...