CVE-2018-3034

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3043

CVE-2018-3043 is an access-control vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component (Oracle Financial Services Applications), subcomponent Infrastructure. Affected versions are 12.3.0, 14.0.0, and 14.1.0. The issue allows a low-privileged, network-based a...

CVE-2018-2899

CVE-2018-2899 describes a vulnerability in the Oracle FLEXCUBE Universal Banking component (subcomponent: Infrastructure) of Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, and 14.1.0. The issue is exploitable with network access via HTTP a...

CVE-2018-2979

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-2979

CVE-2018-2979 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0, 11.4.0, 12.x up to 14.1.0). The vulnerability is a Denial of Service: a low-privileged attacker with network access via HTTP can cause a hang or frequent crash of the system. CVSS ...

CVE-2018-3029

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2018-3041

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3032

CVE-2018-3032 affects Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.0.4, 12.1.0, 12.3.0, 12.4.0. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to potentially update/insert/delete and read certain data. CVSS v3.0 base score is 5.4 (Co...

CVE-2018-3047

The CVE-2018-3047 issue affects Oracle FLEXCUBE Enterprise Limits and Collateral Management within Oracle Financial Services Applications (Infrastructure subcomponent). Affected versions are 12.3.0, 14.0.0 and 14.1.0. It is described as an access-control error vulnerability that could allow an at...

CVE-2018-3045

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3028

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3047

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2018-3039

CVE-2018-3039 describes a vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 12.3.0, 14.0.0 and 14.1.0. The issue allows an unauthenticated attacker with network...

CVE-2018-3049

CVE-2018-3049 affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability allows a low-privileged attacker with network access via HTT...

CVE-2018-2982

CVE-2018-2982 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, 14.1.0. The vulnerability allows a low-privilege, network-accessible attacker over HTTP to access or potentially exfiltrate sensitive data. CVSS3 base score 5.3 (...

Oracle FLEXCUBE Universal Banking Denial of Service Vulnerability (CNVD-2018-24140)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. A denial of service vulnerability exists in the Infrastructure component in Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Oracle FLEXCUBE Universal Banking Information Disclosure Vulnerability

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An information disclosure vulnerability exists in the Infrastructure component in Oracle FLEXCUBE Universal Banking. An attacker could exploit th...

CVE-2018-3032: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3029: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2018-3049: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...