Oracle Kills 402 Bugs in Massive October Patch Update

Business software giant Oracle is urging customers to update their systems in the October release of its quarterly Critical Patch Update CPU, which fixes 402 vulnerabilities across various product families. Well over half 272 of these vulnerabilities open products up to remote exploitation withou...

CVE-2020-14887

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3.0 and 14.0.0-14.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-14824

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3.0 and 14.0.0-14.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-14896

The CVE-2020-14896 entry concerns Oracle Banking Payments (Core) in Oracle Financial Services Applications, affected in versions 14.1.0–14.4.0. The vulnerability allows a low-privilege, unauthenticated attacker over HTTP on the network to access sensitive data, with an impact described as data co...

CVE-2020-14896

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payment...

CVE-2020-14887

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3.0 and 14.0.0-14.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-14887

CVE-2020-14887 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.3.0 and 14.0.0–14.4.0. The vulnerability is described as easily exploitable, allowing a low-privileged attacker with network access via HTTP to access Oracle FLEXCUBE data, potentially yielding una...

CVE-2020-14685

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-14693

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-14693

CVE-2020-14693 affects the Oracle Insurance Accounting Analyzer component (Oracle Financial Services Applications). Affected versions are 8.0.6–8.0.9. The vulnerability is exploitable by a low-privilege, unauthenticated network attacker over HTTP and can lead to unauthorized creation, deletion or...

CVE-2020-14662

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-14662

CVE-2020-14662 pertains to the Oracle Financial Services Analytical Applications Infrastructure (component: Infrastructure). Affected versions are 8.0.6–8.1.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to read data, update/insert/delete data, and ...

CVE-2020-14615

CVE-2020-14615 affects Oracle Financial Services Analytical Applications Infrastructure (Infrastructure component) in Oracle Financial Services Applications, versions 8.0.6–8.1.0. The vulnerability is exposed over HTTP to unauthenticated network access and allows compromising access to Oracle FSA...

CVE-2020-14602

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-14602

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-14603

CVE-2020-14603 affects Oracle Financial Services Analytical Applications Infrastructure (Infrastructure component) in Oracle Financial Services Applications, Version 8.0.6–8.1.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to read restricted data due to a con...

CVE-2020-14601

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2020-14601

CVE-2020-14601 describes a vulnerability in Oracle Financial Services Analytical Applications Infrastructure (Infrastructure component) affecting versions 8.0.6–8.1.0. An unauthenticated attacker can exploit over HTTP to access or modify Oracle FSA Infrastructure data, with read/write access to a...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and Provisioning

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and...