CVE-2016-8299

CVE-2016-8299 affects Oracle FLEXCUBE Universal Banking (Core) across multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.2.0). The vulnerability lies in the Core subcomponent and is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized updat...

CVE-2016-8305

CVE-2016-8305 affects Oracle FLEXCUBE Universal Banking (Core) in Oracle Financial Services Applications for versions 11.3.0, 11.4.0, 12.0.1–12.2.0. The vulnerability enables an attacker with physical access to compromise the system after user interaction, potentially resulting in unauthorized re...

CVE-2016-8307

CVE-2016-8307 affects Oracle FLEXCUBE Universal Banking (Core). The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, potentially allowing read access to a subset of data in supported Oracle FLEXCUBE versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 ...

CVE-2016-8315

CVE-2016-8315 is a vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Affected versions include 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The issue allows a low-privileged attacker with network access v...

CVE-2016-8320

CVE-2016-8320 affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component (Core) of Oracle Financial Services Applications, with affected versions 12.0.0 and 12.0.2. The vulnerability is in the Core subcomponent and allows an unauthenticated attacker with network access via ...

CVE-2016-8319

CVE-2016-8319 affects the Oracle FLEXCUBE Investor Servicing component (subcomponent: Core) in Oracle Financial Services Applications. Affected versions: 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromi...

CVE-2016-8313

CVE-2016-8313 affects Oracle FLEXCUBE Private Banking (Product / Instrument Search subcomponent). Vulnerable versions are 2.0.1, 2.2.0 and 12.0.1. The issue enables a low-privileged attacker with network access over HTTP to read data from the Private Banking component, with human interaction requ...

CVE-2016-8298

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2016-8311

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8316

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2017-3245

CVE-2017-3245 affects Oracle FLEXCUBE Direct Banking (Pre-Login) in Oracle Financial Services Applications. Affected versions: 12.0.2 and 12.0.3. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise Direct Banking, with successful attacks potentia...

CVE-2016-5614

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2016-8301

CVE-2016-8301 affects Oracle FLEXCUBE Universal Banking (Core subcomponent) in Oracle Financial Services Applications. The vulnerability affects supported versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. It is exploitable over HTTP and allows an unauthenticated attacker with ne...

CVE-2016-8311

CVE-2016-8311 affects Oracle FLEXCUBE Universal Banking (Core) in Oracle Financial Services Applications. Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, potentiall...

CVE-2017-3314: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2016-8303: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-8309: Improper Access Control

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2017-3245: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8300: Improper Access Control

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Difficult to exploit vulnerability allows low privileged attacker with network acce...

CVE-2016-8324: Improper Access Control

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...