CVE-2018-3033

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network acce...

CVE-2018-3034

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3041

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3045

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3049

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3030

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-2897

CVE-2018-2897 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected supported versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticate...

CVE-2018-2898

CVE-2018-2898 affects Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. An unauthenticated attacker with network access via HTTP can compromise the component, but attacks require user interaction. Impact includes unauthorized update/inse...

CVE-2018-2899

CVE-2018-2899 describes a vulnerability in the Oracle FLEXCUBE Universal Banking component (subcomponent: Infrastructure) of Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, and 14.1.0. The issue is exploitable with network access via HTTP a...

CVE-2018-2980

CVE-2018-2980 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0–14.1.0). The vulnerability permits a low-privilege, network-accessing attacker (via HTTP) to read/write data and cause partial denial of service. CVSS 3.0 base score is 5.4 (I and A...

CVE-2018-2981

The CVE-2018-2981 entry describes a vulnerability in Oracle FLEXCUBE Universal Banking (Infrastructure) affecting multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, 14.1.0). A low-privilege, network-accessible attacker can exploit HTTP to compromise data. Impact includes unauthor...

CVE-2018-3019

CVE-2018-3019 is a vulnerability in the Oracle FLEXCUBE Universal Banking component (Infrastructure) affecting multiple 11.x–14.x supported versions. The issue enables a low-privileged, network-accessible attacker (HTTP) to compromise data confidentiality and integrity, requiring user interaction...

CVE-2018-3031

CVE-2018-3031 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) on versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to modify or delete certain data and cause partial denial of service. CVSS v3.0 ...

CVE-2018-3037

CVE-2018-3037 affects Oracle Financial Services Applications’ FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure). Affects versions 12.3.0, 14.0.0, 14.1.0. Root cause described as an access control error enabling a low-privilege, network-access attacker (via HTTP) to read, updat...

CVE-2018-3039

CVE-2018-3039 describes a vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 12.3.0, 14.0.0 and 14.1.0. The issue allows an unauthenticated attacker with network...

CVE-2018-3045

The CVE-2018-3045 entry concerns Oracle FLEXCUBE Enterprise Limits and Collateral Management (part of Oracle Financial Services Applications, Infrastructure subcomponent). Affected versions are 12.3.0, 14.0.0 and 14.1.0. An attacker with network access over HTTP and low privileges can exploit thi...

CVE-2018-2974

CVE-2018-2974 concerns Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. The vulnerability is exploitable by a low-privileg...

CVE-2018-3028

CVE-2018-3028 affects the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications . Affected versions are 12.0.4, 12.1.0, 12.3.0 and 12.4.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the service, leading to possib...

CVE-2018-3030

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3028

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...