Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2016-5614

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2016-8323

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-3297

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Framework. Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8323

CVE-2016-8323 affects Oracle FLEXCUBE Core Banking (Core subcomponent) in Oracle Financial Services Applications. Affected versions: 5.1.0, 5.2.0, 11.5.0. Vulnerability allows a low-privilege, network-accessing attacker over HTTP to perform unauthorized updates/inserts/deletes and read access to ...

CVE-2016-8314

CVE-2016-8314 affects Oracle FLEXCUBE Core Banking (subcomponent: Core). Affected versions are 5.1.0, 5.2.0 and 11.5.0. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP and can lead to unauthorized read access to a subset of data in Oracle FLEXCUBE Core ...

CVE-2016-8297

CVE-2016-8297 affects Oracle FLEXCUBE Universal Banking Core in Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. The vulnerability allows a low-privileged attacker to remotely access via HTTP and perform unauthorized crea...

CVE-2016-8312

CVE-2016-8312 affects Oracle FLEXCUBE Private Banking (subcomponent: Product / Instrument Search) in Oracle Financial Services Applications, with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows unauthenticated, network-accessible access via HTTP to compromise Private Banking; ...

CVE-2016-8322

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-3245

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8302

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8304

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2017-3236

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3235

CVE-2017-3235 affects the Oracle FLEXCUBE Universal Banking component (Core subcomponent) of Oracle Financial Services Applications. Affected supported versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. The vulnerability allows physical access to compromise the system, enabli...

CVE-2016-8301

CVE-2016-8301 affects Oracle FLEXCUBE Universal Banking (Core subcomponent) in Oracle Financial Services Applications. The vulnerability affects supported versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. It is exploitable over HTTP and allows an unauthenticated attacker with ne...

CVE-2016-8307

CVE-2016-8307 affects Oracle FLEXCUBE Universal Banking (Core). The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, potentially allowing read access to a subset of data in supported Oracle FLEXCUBE versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 ...

CVE-2016-8304

CVE-2016-8304 affects Oracle FLEXCUBE Universal Banking (Core) with affected versions 11.3.0, 11.4.0, 12.0.1–12.2.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data security; exploitation requires user interaction. Impact includes unauthorized up...

CVE-2016-8302

CVE-2016-8302 is a vulnerability in the Oracle FLEXCUBE Universal Banking component (subcomponent: Core) affecting Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. The issue allows a low-privileged attacker with network a...

CVE-2016-8311

CVE-2016-8311 affects Oracle FLEXCUBE Universal Banking (Core) in Oracle Financial Services Applications. Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, potentiall...

CVE-2016-5614

CVE-2016-5614 affects the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Affected versions: 2.0.1, 2.2.0, and 12.0.1. The vulnerability allows a low-privilege attacker with network access via HTTP to read data from ...