CVE-2017-3491

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.1 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker...

CVE-2017-3489

CVE-2017-3489 affects Oracle FLEXCUBE Investor Servicing (Security Management System subcomponent) within Oracle Financial Services Applications. Affected versions include 12.0.1–12.3.0. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to perform unauthorized update/i...

CVE-2017-3488

CVE-2017-3488 concerns Oracle FLEXCUBE Investor Servicing, specifically the Unit Trust subcomponent, and affects multiple supported releases (12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0, 12.3.0). The connected documents describe a vulnerability that enables a low-privileged attacker with netwo...

CVE-2017-3471

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3496

CVE-2017-3496 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise t...

CVE-2017-3479

Affected product: Oracle FLEXCUBE Private Banking (component: Miscellaneous) within Oracle Financial Services Applications. Affected versions: 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1. Summary: an easily exploitable vulnerability allows a low-privilege attacker with network access via HTTP to compromise...

CVE-2017-3472

CVE-2017-3472 is an Oracle FLEXCUBE Private Banking vulnerability affecting versions 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1 in the Portfolio Management subcomponent. The issue enables a low-privilege, network-accessible attacker (via HTTP) to compromise data, potentially enabling unauthorized creation...

CVE-2017-3490

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2017-3473

The CVE-2017-3473 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in versions 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The issue arises from a vulnerability in the Oracle FLEXCUBE Private Banking implementation that allows a low-privileged, network-accessible attacker...

CVE-2017-3489

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Security Management System. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low...

CVE-2017-3476

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3477

The CVE-2017-3477 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in Oracle Financial Services Applications, specifically versions 12.0.0 and 12.1.0. The CNVD entry states an attacker could exploit the issue to unauthorizedly read, update, insert, or delete dat...

CVE-2017-3473

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3484

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker...

CVE-2017-3535

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3496

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3476

CVE-2017-3476 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) of Oracle Financial Services Applications. Affected versions: 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1. The vulnerability is exploitable by a low-privilege, network-accessible attacker over HTTP, potentially leading to u...

CVE-2017-3471

CVE-2017-3471 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and, per the description and CV...

CVE-2017-3494

CVE-2017-3494 is a vulnerability in Oracle FLEXCUBE Universal Banking (subcomponent: Retail Teller). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, and 12.0.3. An unauthenticated attacker with network access via HTTP can compromise the component; successful attacks require human interactio...

CVE-2017-3479

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...