PT-2022-12240

Name of the Vulnerable Software and Affected Versions Delta RM version 1.2 Description An issue was discovered in the software where the "/risque/risque/workflow/reset" endpoint lacks access controls. This allows an unprivileged user to reopen a risk by sending a POST request and using the risque...

Oracle FLEXCUBE Investor Servicing Unauthorized Access

The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Investor Servicing financial management software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...