CVE-2017-10072

CVE-2017-10072 affects Oracle FLEXCUBE Universal Banking in Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data: unau...

CVE-2017-10073

CVE-2017-10073 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0. Described as easily exploitable: a low-privileged attacker with network access via HTTP can compromise data, with possible una...

CVE-2017-10083

CVE-2017-10083 affects the Oracle FLEXCUBE Universal Banking component (Infrastructure) of Oracle Financial Services Applications, affecting versions 11.3.0, 11.4.0, 12.0.1–12.3.0. The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP, with user interaction ...

CVE-2017-10084

The CVE-2017-10084 entry concerns Oracle FLEXCUBE Universal Banking, specifically the Report Generator subcomponent. Affected releases include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to comp...

CVE-2017-10103

CVE-2017-10103 describes a vulnerability in the Oracle FLEXCUBE Private Banking component (Miscellaneous subcomponent) of Oracle Financial Services Applications. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The issue allows a low-privileged attacker who can reach the system over HTTP via...

CVE-2017-10085

The CVE-2017-10085 entry concerns Oracle FLEXCUBE Universal Banking (Infrastructure) in Oracle Financial Services Applications. Affects versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, and 12.3.0. The vulnerability allows a low-privileged attacker with network access over HTTP to ...

CVE-2017-10098

CVE-2017-10098 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in multiple supported releases (11.3.0, 11.4.0, 12.0.1–12.3.0). The flaw enables a low-privilege attacker who can access the service over HTTP to perform unauthorized read, update, insert, or delete actions on ...

CVE-2017-10181

The CVE-2017-10181 entry concerns Oracle FLEXCUBE Direct Banking (Forgot Password) in Oracle Financial Services Applications. Affected version: 12.0.2 and 12.0.3. Description: a low-privileged, network-accessible attacker via HTTP can exploit this vulnerability to cause a hang/frequent crash (DOS...

CVE-2017-10006

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10071

CVE-2017-10071 affects Oracle FLEXCUBE Universal Banking within Oracle Financial Services Applications (subcomponents: All Modules). Affected versions include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. The vulnerability allows an unauthenticated attacker with network acces...

CVE-2017-10072

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: All Modules. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged...

CVE-2017-10005

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2017-11096

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks can result in unauthorized...

PT-2017-10968

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human...

PT-2017-10970

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking, resulting in unauthorized read access to a...

PT-2017-10971

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking, resulting in unauthorized read access to a...

PT-2017-10972

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthoriz...

PT-2017-10973

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interactio...

PT-2017-10979

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle FLEXCUBE Private Banking executes to compromise Oracle FLEXCUBE Private...

PT-2017-10980

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthoriz...