CVE-2020-2718

CVE-2020-2718 affects Oracle Financial Services Applications Banking Corporate Lending (Core) with affected versions 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access ...

CVE-2020-2717

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2717

CVE-2020-2717 affects Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affects versions 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise data; attacks require user interaction. P...

CVE-2020-2710

Oracle Banking Payments (Oracle Financial Services Applications, Core) is affected in versions 14.1.0–14.3.0. A low-privilege, network-based attacker with HTTP access can compromise data confidentiality and integrity. CVSSv3.0 base score is 5.4 (C:L, I:L; A:N; PR:L; AV:N). The connected documents...

CVE-2020-2719

CVE-2020-2719 affects Oracle Banking Corporate Lending (Core) in Oracle Financial Services Applications. Affected versions are 12.3.0–12.4.0 and 14.0.0–14.3.0. An attacker with network access over HTTP and low privileges can read a subset of data due to an underlying vulnerability in the Core com...

CVE-2020-2722

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2720

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2020-2716

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2723

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2020-2712

CVE-2020-2712 affects the Oracle Banking Payments component (Core) of Oracle Financial Services Applications. Affected supported versions are 14.1.0–14.3.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. The attack can res...

CVE-2020-2724

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2020-2715

CVE-2020-2715 affects Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions: 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability permits a low-privilege, network-accessible attacker over HTTP to read and modify data (update/insert/delete) in the a...

CVE-2020-2684

CVE-2020-2684 affects Oracle FLEXCUBE Universal Banking (Infrastructure). Affected versions are 12.0.1–12.4.0 and 14.0.0–14.3.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to unauthorized access to critical data or the entire Oracle FLE...

CVE-2020-2700

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2020-2688

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Object Migration. Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-2688

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Object Migration. Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-2700

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...

CVE-2020-2688

CVE-2020-2688 affects Oracle Financial Services Analytical Applications Infrastructure (OFSAI) in the Object Migration component. Affected versions are 8.0.4–8.0.8. The issue allows a low-privilege attacker with network access over HTTP to gain unauthorized access to data or perform unauthorized ...

CVE-2020-2700

CVE-2020-2700 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.0.1–12.4.0 and 14.0.0–14.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to read a subset of data from the system. The root cause and exact vulnerable component ...

CVE-2020-2685

The CVE-2020-2685 entry concerns Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.0.1–12.4.0 and 14.0.0–14.3.0. The vulnerability supports network access via HTTP and is exploitable by an unauthenticated attacker, though user interaction is required (UI: Required). The...