CVE-2017-3235

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise...

CVE-2017-3297

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Framework. Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-5509

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access v...

CVE-2016-5623

CVE-2016-5623 affects Oracle FLEXCUBE Private Banking (Oracle Financial Services Applications), specifically the Product / Instrument Search subcomponent. Affected versions are 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privileged attacker who can reach the service over HTTP to perfo...

CVE-2016-8298

CVE-2016-8298 affects the Oracle FLEXCUBE Private Banking component (subcomponent: Product / Instrument Search). Affected versions are 2.0.1, 2.2.0, and 12.0.1. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component, potentially leading to unau...

CVE-2016-8313

CVE-2016-8313 affects Oracle FLEXCUBE Private Banking (Product / Instrument Search subcomponent). Vulnerable versions are 2.0.1, 2.2.0 and 12.0.1. The issue enables a low-privileged attacker with network access over HTTP to read data from the Private Banking component, with human interaction requ...

CVE-2016-8322

CVE-2016-8322 affects Oracle FLEXCUBE Core Banking (subcomponent: Core). Affected versions are 5.1.0, 5.2.0 and 11.5.0. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to read a subset of data in the Core Banking component. The CVSS v3 base score is 4.3 (Confidentiali...

CVE-2016-8305

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise...

CVE-2016-8313

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2016-8315

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure Code. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2017-3235

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise...

CVE-2017-3245

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-3314

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2016-5614

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2016-8304

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8310

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-8317

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2016-8309

CVE-2016-8309 is a vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (Core). Affected versions are 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability is triggered by remote, network-accessible HTTP input allowing a low-privilege ...

CVE-2016-8312

CVE-2016-8312 affects Oracle FLEXCUBE Private Banking (subcomponent: Product / Instrument Search) in Oracle Financial Services Applications, with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows unauthenticated, network-accessible access via HTTP to compromise Private Banking; ...

CVE-2016-8315

CVE-2016-8315 is a vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Affected versions include 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The issue allows a low-privileged attacker with network access v...