CVE-2017-3472

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Portfolio Management. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network...

CVE-2017-3472

CVE-2017-3472 is an Oracle FLEXCUBE Private Banking vulnerability affecting versions 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1 in the Portfolio Management subcomponent. The issue enables a low-privilege, network-accessible attacker (via HTTP) to compromise data, potentially enabling unauthorized creation...

CVE-2017-3534

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attacker wi...

CVE-2017-3479

Affected product: Oracle FLEXCUBE Private Banking (component: Miscellaneous) within Oracle Financial Services Applications. Affected versions: 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1. Summary: an easily exploitable vulnerability allows a low-privilege attacker with network access via HTTP to compromise...

CVE-2017-3479

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3476

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3478

CVE-2017-3478 affects Oracle FLEXCUBE Private Banking (Miscellaneous subcomponent) in Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to read and modify data, potentially e...

CVE-2017-3479

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3471

CVE-2017-3471 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and, per the description and CV...

CVE-2017-3478

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-3535

CVE-2017-3535 affects the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to com...

CVE-2017-3475

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3473

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3472

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Portfolio Management. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network...

CVE-2017-3494

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Retail Teller. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with netwo...

CVE-2017-3495

Oracle FLEXCUBE Direct Banking (Pre-Login) vulnerability CVE-2017-3495 exists in Oracle Financial Services Applications. Connected sources corroborate affected versions 12.0.2 and 12.0.3 and describe an unauthenticated, network-accessible issue via HTTP in the Pre-Login subcomponent that can lead...

CVE-2017-3485

CVE-2017-3485 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions: 11.3.0, 11.4.0, 12.0.0–12.0.3, 12.1.0, 12.2.0. Attack via HTTP from a low-privilege user with network access could create/modify/delete data and caus...

CVE-2016-1210

The 105 BANK app 1.0 and 1.1 for Android and 1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Oracle FLEXCUBE Private Banking Remote Vulnerability

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-06017)

Oracle Retail Applications is an e-commerce solution. A security vulnerability exists in the Oracle FLEXCUBE Universal Banking component, which can be exploited by remote attackers to compromise system availability...