Buffer overflow

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2023-22125

Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications is affected for versions 14.5–14.7. The vulnerability arises from insufficient input validation, enabling a remote attacker with network access over HTTP and low privileges to access data with read, update, in...

CVE-2023-22123

CVE-2023-22123 affects Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications, specifically versions 14.5–14.7. Root cause: insufficient input validation allowing a low-privileged attacker with network access via HTTP to compromise the system. Impact includes unau...

CVE-2023-22124

CVE-2023-22124 affects Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications, specifically versions 14.5–14.7. The issue stems from insufficient input validation in the Infrastructure component, enabling a low-privileged attacker who can reach the system over HTT...

CVE-2023-22121

Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications is affected for versions 14.5–14.7. The vulnerability allows an unauthenticated attacker with network access via HTTP, after user interaction, to modify or read data (unauthorized update/insert/delete and read...

CVE-2023-22122

Oracle Banking Trade Finance (Infrastructure component) in Oracle Financial Services Applications, versions 14.5–14.7, is affected. The root cause is insufficient input validation in the Infrastructure layer, allowing a low-privileged attacker with HTTP network access to compromise the system, wi...

CVE-2023-22118

CVE-2023-22118 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.3, 12.4, 14.0–14.3 and 14.5–14.7. Vulnerability allows a low‑privileged attacker with network access via HTTP, with required user interaction, to modify/read data and cause a partial DOS. Mitigatio...

CVE-2023-22117

CVE-2023-22117 affects Oracle FLEXCUBE Universal Banking (Infrastructure component). Vulnerable versions: 12.3, 12.4, 14.0–14.3, and 14.5–14.7. Root cause cited in connected sources: insufficient input validation in the Infrastructure component, enabling a low-privileged attacker with network acc...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and estate management. A security vulnerability exists in Oracle Banking Trade Finance version 14.5-14.7 of Oracle Financial Services Applications,...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and estate management. A security vulnerability exists in Oracle Banking Trade Finance version 14.5-14.7 of Oracle Financial Services Applications,...

CVE-2023-22123: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Vulnerabilities fixed in Oracle Financial Services Applications

Vulnerabilities have been fixed in Oracle Financial Services Applications products. A malicious party could exploit them to launch attacks that can result in the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Remote code execution...

Oracle Financial Services Behavior Detection Platform Application Unauthorized Access

The vulnerability of the sub-component “Application” within the Oracle Financial Services Behavior Detection Platform of a bank analytics system’s simulation model involves insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain...

Oracle Patch Tuesday April 2023 Security Update Review

Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components...

CVE-2023-21906

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: SMS Module. Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2023-21915

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Book/Internal Transfer. Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2023-21902

Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Application. The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2023-21902

Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Application. The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: Routing Hub. Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Internal Tfr Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acce...