CVE-2016-8309

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2016-8316

CVE-2016-8316 : Vulnerability in the Oracle FLEXCUBE Investor Servicing (Core) component. Affected versions: 12.0.1, 12.0.2, 12.0.4, 12.1.0, 12.3.0. An attacker with network access via HTTP and low privileges can exploit the issue, with user interaction required, to cause unauthorized updates, in...

CVE-2016-8315

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure Code. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-5623

CVE-2016-5623 affects Oracle FLEXCUBE Private Banking (Oracle Financial Services Applications), specifically the Product / Instrument Search subcomponent. Affected versions are 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privileged attacker who can reach the service over HTTP to perfo...

CVE-2016-8282

CVE-2016-8282 affects Oracle FLEXCUBE Private Banking (Product / Instrument Search) with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access; exploitation requires user interaction. The flaw can allow unauthorize...

CVE-2016-8300

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Difficult to exploit vulnerability allows low privileged attacker with network acce...

CVE-2016-8306

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2016-8308

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2016-8324

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8300

CVE-2016-8300 affects Oracle FLEXCUBE Private Banking (subcomponent: Product / Instrument Search) with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise the Private Banking component, potentially enabling unauth...

CVE-2016-8302

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8282

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2016-5509

CVE-2016-5509 affects Oracle FLEXCUBE Investor Servicing (Core) in Oracle Financial Services Applications. Affected versions are 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP, potentially resulting in unauthori...

CVE-2016-8319

CVE-2016-8319 affects the Oracle FLEXCUBE Investor Servicing component (subcomponent: Core) in Oracle Financial Services Applications. Affected versions: 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromi...

CVE-2016-8317

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2016-8317

CVE-2016-8317 affects Oracle FLEXCUBE Investor Servicing (Unit Trust subcomponent) in Oracle Financial Services Applications. Affects supported versions 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability enables a low-privilege user who has network access via HTTP to compromise the serv...

CVE-2017-3245

CVE-2017-3245 affects Oracle FLEXCUBE Direct Banking (Pre-Login) in Oracle Financial Services Applications. Affected versions: 12.0.2 and 12.0.3. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise Direct Banking, with successful attacks potentia...

CVE-2016-8315

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure Code. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8314

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8299

CVE-2016-8299 affects Oracle FLEXCUBE Universal Banking (Core) across multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.2.0). The vulnerability lies in the Core subcomponent and is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized updat...