CVE-2017-3297

The CVE-2017-3297 entry concerns Oracle FLEXCUBE Direct Banking (subcomponent: Framework). Affected versions are 12.0.2 and 12.0.3. The vulnerability is described as difficult to exploit, allowing a low-privilege attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking, ...

CVE-2016-8322

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8297

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8312

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2016-8305

CVE-2016-8305 affects Oracle FLEXCUBE Universal Banking (Core) in Oracle Financial Services Applications for versions 11.3.0, 11.4.0, 12.0.1–12.2.0. The vulnerability enables an attacker with physical access to compromise the system after user interaction, potentially resulting in unauthorized re...

CVE-2016-8298

CVE-2016-8298 affects the Oracle FLEXCUBE Private Banking component (subcomponent: Product / Instrument Search). Affected versions are 2.0.1, 2.2.0, and 12.0.1. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component, potentially leading to unau...

CVE-2017-3314

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2016-5623

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2016-8313

CVE-2016-8313 affects Oracle FLEXCUBE Private Banking (Product / Instrument Search subcomponent). Vulnerable versions are 2.0.1, 2.2.0 and 12.0.1. The issue enables a low-privileged attacker with network access over HTTP to read data from the Private Banking component, with human interaction requ...

CVE-2016-8282

CVE-2016-8282 affects Oracle FLEXCUBE Private Banking (Product / Instrument Search) with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access; exploitation requires user interaction. The flaw can allow unauthorize...

CVE-2016-8308

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2016-8324

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8300

CVE-2016-8300 affects Oracle FLEXCUBE Private Banking (subcomponent: Product / Instrument Search) with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise the Private Banking component, potentially enabling unauth...

CVE-2016-8302

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8282

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-3245

CVE-2017-3245 affects Oracle FLEXCUBE Direct Banking (Pre-Login) in Oracle Financial Services Applications. Affected versions: 12.0.2 and 12.0.3. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise Direct Banking, with successful attacks potentia...

CVE-2016-8314

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8299

CVE-2016-8299 affects Oracle FLEXCUBE Universal Banking (Core) across multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.2.0). The vulnerability lies in the Core subcomponent and is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized updat...

CVE-2017-3314

CVE-2017-3314 affects Oracle FLEXCUBE Universal Banking (Oracle Financial Services Applications, Core subcomponent). Affected versions are 12.0.0, 12.1.0 and 12.2.0. The vulnerability enables an unauthenticated attacker who can access over HTTP to compromise the application; exploitation requires...

CVE-2016-8310

CVE-2016-8310 is a vulnerability in Oracle FLEXCUBE Universal Banking (Core subcomponent) affecting Oracle Financial Services Applications on versions 11.3.0, 11.4.0, 12.0.1–12.2.0. An unauthenticated, network-accessible attacker can exploit HTTP to read, update, insert, or delete data and cause ...