CVE-2018-2897

CVE-2018-2897 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected supported versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticate...

CVE-2018-3042

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2955

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: Integration. The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3025

CVE-2018-3025 is a vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (Payments Core). Affected versions are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. The flaw is exploitable by a low-privilege attacker over HTTP with network access, leading to poten...

CVE-2018-2896

CVE-2018-2896 affects the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent Payments Core). Affected supported versions are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. The vulnerability is exploitable by an unauthenticated attacker with network access via HT...

CVE-2018-3051

CVE-2018-3051 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Oracle Financial Services Applications), specifically the Infrastructure subcomponent. Connected sources describe an access control error in FLEXCUBE Enterprise Limits and Collateral Management that can allow a low...

CVE-2018-3022

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2974

CVE-2018-2974 concerns Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. The vulnerability is exploitable by a low-privileg...

CVE-2018-3049

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-2979

CVE-2018-2979 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0, 11.4.0, 12.x up to 14.1.0). The vulnerability is a Denial of Service: a low-privileged attacker with network access via HTTP can cause a hang or frequent crash of the system. CVSS ...

CVE-2018-3019

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-2895

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2897

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2018-3033

Affected product: Oracle FLEXCUBE Investor Servicing (Infrastructure) in Oracle Financial Services Applications. Vulnerable versions: 12.0.4, 12.1.0, 12.3.0, 12.4.0. Risk and impact: Low-privilege attacker with HTTP network access can compromise the service, leading to unauthorized access to sens...

CVE-2018-2898

CVE-2018-2898 affects Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. An unauthenticated attacker with network access via HTTP can compromise the component, but attacks require user interaction. Impact includes unauthorized update/inse...

CVE-2018-2982

CVE-2018-2982 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, 14.1.0. The vulnerability allows a low-privilege, network-accessible attacker over HTTP to access or potentially exfiltrate sensitive data. CVSS3 base score 5.3 (...

CVE-2018-2981

The CVE-2018-2981 entry describes a vulnerability in Oracle FLEXCUBE Universal Banking (Infrastructure) affecting multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, 14.1.0). A low-privilege, network-accessible attacker can exploit HTTP to compromise data. Impact includes unauthor...

CVE-2018-2882

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Interfaces. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...

CVE-2018-2888

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J...

CVE-2018-2891

Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications subcomponent: BDI Job Scheduler. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reta...