CVE-2018-2982: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Difficult to exploit...

CVE-2018-2981: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-3033: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network acce...

CVE-2018-3032: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3019: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-3049: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3030: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3031: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-2899: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

PT-2018-16002

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, and 14.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collatera...

PT-2018-15958

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24141)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

PT-2018-16004

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, and 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

PT-2018-15992

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing, resulting in unauthorized re...

PT-2018-15998

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks can result ...

PT-2018-16008

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.3.0, 14.0.0, 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

Apache CXF CVE-2018-8039 TLS Hostname Verification Security Bypass Vulnerability

Description Apache CXF is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to obtain sensitive information by conducting a man-in-the-middle attack. This may lead to other attacks. The following versions of product are vulnerable: Apache CXF 3.1.16...

Oracle Financial Services Applications FLEXCUBE Core Banking Component Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a set of Oracle's core banking, online banking and property management financial services software. FLEXCUBE Core Banking is one of the core banking components. A security vulnerability exists in the Securities subcomponent of the FLEXCUBE Core Banking...

CVE-2018-2807

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Securities. Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2807

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Securities. Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...