CVE-2017-3492

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker with...

CVE-2017-3491

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.1 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker...

CVE-2017-3488

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attack...

CVE-2017-3487

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attack...

CVE-2017-3485

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit vulnerability allows low...

CVE-2017-3478

CVE-2017-3478 affects Oracle FLEXCUBE Private Banking (Miscellaneous subcomponent) in Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to read and modify data, potentially e...

CVE-2017-3494

CVE-2017-3494 is a vulnerability in Oracle FLEXCUBE Universal Banking (subcomponent: Retail Teller). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, and 12.0.3. An unauthenticated attacker with network access via HTTP can compromise the component; successful attacks require human interactio...

CVE-2017-3288

CVE-2017-3288 affects Oracle FLEXCUBE Investor Servicing (Unit Trust) in Oracle Financial Services Applications. Publicly affected versions are 12.0.1–12.3.0. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise data: unauthorized update/insert/delete on ...

CVE-2017-3473

The CVE-2017-3473 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in versions 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The issue arises from a vulnerability in the Oracle FLEXCUBE Private Banking implementation that allows a low-privileged, network-accessible attacker...

CVE-2017-3487

CVE-2017-3487 affects Oracle FLEXCUBE Investor Servicing (Unit Trust subcomponent) in Oracle Financial Services Applications. Affected versions are 12.0.1–12.3.0. The vulnerability is exploitable by a low-privilege, remote attacker over HTTP to modify data, with the potential for unauthorized upd...

CVE-2017-3496

CVE-2017-3496 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise t...

CVE-2017-3479

Affected product: Oracle FLEXCUBE Private Banking (component: Miscellaneous) within Oracle Financial Services Applications. Affected versions: 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1. Summary: an easily exploitable vulnerability allows a low-privilege attacker with network access via HTTP to compromise...

CVE-2017-3477

The CVE-2017-3477 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in Oracle Financial Services Applications, specifically versions 12.0.0 and 12.1.0. The CNVD entry states an attacker could exploit the issue to unauthorizedly read, update, insert, or delete dat...

CVE-2017-3472

CVE-2017-3472 is an Oracle FLEXCUBE Private Banking vulnerability affecting versions 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1 in the Portfolio Management subcomponent. The issue enables a low-privilege, network-accessible attacker (via HTTP) to compromise data, potentially enabling unauthorized creation...

CVE-2017-3479

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3476

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3534

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attacker wi...

CVE-2017-3471

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3472

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Portfolio Management. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network...

CVE-2017-3494

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Retail Teller. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with netwo...