CVE-2020-2718

CVE-2020-2718 affects Oracle Financial Services Applications Banking Corporate Lending (Core) with affected versions 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access ...

CVE-2020-2712

CVE-2020-2712 affects the Oracle Banking Payments component (Core) of Oracle Financial Services Applications. Affected supported versions are 14.1.0–14.3.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. The attack can res...

CVE-2020-2715

CVE-2020-2715 affects Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions: 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability permits a low-privilege, network-accessible attacker over HTTP to read and modify data (update/insert/delete) in the a...

CVE-2020-2716

The CVE-2020-2716 entry concerns Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions are 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability enables a low-privileged, network-accessible attacker to compromise the system via HTTP, potentially lea...

CVE-2020-2711

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

CVE-2020-2720

CVE-2020-2720 affects Oracle FLEXCUBE Investor Servicing (Oracle Financial Services Applications), specifically the Infrastructure component, with affected versions 12.1.0-12.4.0 and 14.0.0-14.1.0. The vulnerability enables a low-privilege, unauthenticated or minimally authenticated attacker with...

CVE-2020-2712

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking...

CVE-2020-2714

The CVE-2020-2714 entry concerns Oracle Banking Payments within Oracle Financial Services Applications (component: Core). Affected versions are 14.1.0–14.3.0. The vulnerability allows a low-privileged attacker with network access over HTTP to read data from Oracle Banking Payments, as described i...

CVE-2020-2724

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2020-2717

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2721

CVE-2020-2721 describes a vulnerability in Oracle FLEXCUBE Investor Servicing (Infrastructure). Affected versions are 12.1.0-12.4.0 and 14.0.0-14.1.0. The issue allows a low-privileged attacker who can access the system over HTTP to compromise Oracle FLEXCUBE Investor Servicing, potentially leadi...

CVE-2020-2718

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2722

Oracle FLEXCUBE Investor Servicing (Infrastructure) is affected in versions 12.1.0–12.4.0 and 14.0.0–14.1.0. The issue relates to inadequate access controls, allowing an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized upd...

CVE-2020-2717

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2715

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2724

CVE-2020-2724 affects Oracle FLEXCUBE Investor Servicing (Oracle Financial Services Applications), specifically the Infrastructure component. AFFECTED VERSIONS: 12.1.0–12.4.0 and 14.0.0–14.1.0. ROOT CAUSE: a low-privilege, network-accessible (HTTP) vulnerability that can lead to unauthorized read...

CVE-2020-2723

The CVE-2020-2723 entry relates to Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.1.0–12.4.0 and 14.0.0–14.1.0. The vulnerability permits a low-privileged, network-accessible attacker over HTTP to gain unauthorized access to sensitive data and potentially perform un...

CVE-2020-2723

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2020-2713

CVE-2020-2713 affects the Oracle Banking Payments product (Oracle Financial Services Applications), specifically the Core component, with affected versions 14.1.0–14.3.0. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Banking Payments, poten...

CVE-2020-2716

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...