PT-2018-15867

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Basel Regulatory Capital Basic version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Basel Regulatory Capital Basic. Successful...

PT-2018-15869

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach version 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Basel Regulatory Capit...

PT-2018-15872

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Applications version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach...

PT-2018-15868

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Basel Regulatory Capital Basic version 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Basel Regulatory Capital Basic. Successful attac...

CVE-2018-2855: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2854: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2749: Undefined Security Weakness

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2859: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticate...

CVE-2018-2807: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Securities. Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2856: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged...

Oracle Financial Services Analytical Applications 7.3.5.x / 8.0.x XXE Injection(CVE-2018-2660) / XSS(CVE-2018-2661)

Vendor description: ------------------- "Oracle is the unchallenged leader in Financial Services, with an integrated, best-in-class, end-to-end solution of intelligent software and powerful hardware designed to meet every financial service need." Source:...

Oracle Financial Services Analytical Application XXE / XSS Vulnerabilities

Exploit for multiple platform in category web applications The Oracle Financial Services Analytical Application is affected by an XML External Entity XXE vulnerability which may lead to disclosing sensitive information. It is also affected by a reflected cross site scripting XSS issue. Vendor...

Oracle Financial Services Analytical Applications 7.3.5.x / 8.0.x XXE Injection / XSS

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & Reflected XSS product: Oracle Financial Services Analytical Applications vulnerable version: 7.3.5.x, 8.0.x fixed version: Oracle CPU January 2018 CVE number:...

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Infrastructure Component

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Oracle Financial Services Analytical Applications Infrastructure is one of the financial services...

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Infrastructure Component (CNVD-2018-01704)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Oracle Financial Services Analytical Applications Infrastructure is one of the financial services...

Unspecified Vulnerability in Oracle Financial Services Profitability Management Component (CNVD-2018-01706)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management, of which Oracle Financial Services Profitability Management is a financial services profitability management component. Oracle Financial Services...

Unspecified Vulnerability in Oracle Financial Services Liquidity Risk Management Component (CNVD-2018-01707)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and asset management. Oracle Financial Services Liquidity Risk Management is one of the financial services liquidity risk management component. A security vulnerability exists...

Unspecified Vulnerability in Oracle Financial Services Asset Liability Management Component

Oracle Financial Services Applications is Oracle's suite of financial services software that integrates core banking, online banking, and property management.Oracle Financial Services Asset Liability Management is one of the financial services asset liability management components. Oracle Financi...

Unspecified Vulnerability in Oracle Financial Services Funds Transfer Pricing Component

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle Financial Services Funds Transfer Pricing is one of the Financial Services Funds Transfer Pricing component. A security...

Unspecified Vulnerability in Oracle Financial Services Hedge Management and IFRS Valuations Component

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking and property management.Oracle Financial Services Hedge Management and IFRS Valuations is one of the financial services hedge management and IFRS valuation...