CVE-2017-3488

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attack...

CVE-2017-3481

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access via HT...

CVE-2017-3492

The CVE-2017-3492 vulnerability affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The issue allows a low-privileged attacker with network access via HTTP to read...

CVE-2017-3471

CVE-2017-3471 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) within Oracle Financial Services Applications. Affected versions are 12.0.0 and 12.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker and, per the description and CV...

CVE-2017-3472

CVE-2017-3472 is an Oracle FLEXCUBE Private Banking vulnerability affecting versions 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1 in the Portfolio Management subcomponent. The issue enables a low-privilege, network-accessible attacker (via HTTP) to compromise data, potentially enabling unauthorized creation...

CVE-2017-3473

The CVE-2017-3473 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in versions 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The issue arises from a vulnerability in the Oracle FLEXCUBE Private Banking implementation that allows a low-privileged, network-accessible attacker...

CVE-2017-3479

Affected product: Oracle FLEXCUBE Private Banking (component: Miscellaneous) within Oracle Financial Services Applications. Affected versions: 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1. Summary: an easily exploitable vulnerability allows a low-privilege attacker with network access via HTTP to compromise...

CVE-2017-3480

CVE-2017-3480 concerns Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0 and 12.0.1. The vulnerability is described as easily exploitable by an unauthenticated attacker with network access via HTTP to th...

CVE-2017-3482

CVE-2017-3482 describes a vulnerability in the Oracle FLEXCUBE Universal Banking Infrastructure subcomponent of Oracle Financial Services Applications. Affects supported versions 12.0.0 through 12.3.0. The issue is exploitable by a low-privilege, network-accessible attacker via HTTP, with human i...

CVE-2017-3485

CVE-2017-3485 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions: 11.3.0, 11.4.0, 12.0.0–12.0.3, 12.1.0, 12.2.0. Attack via HTTP from a low-privilege user with network access could create/modify/delete data and caus...

CVE-2017-3488

CVE-2017-3488 concerns Oracle FLEXCUBE Investor Servicing, specifically the Unit Trust subcomponent, and affects multiple supported releases (12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0, 12.3.0). The connected documents describe a vulnerability that enables a low-privileged attacker with netwo...

CVE-2017-3490

CVE-2017-3490 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (subcomponent: Limits and Collateral) within Oracle Financial Services Applications, specifically versions 12.0.0 and 12.1.0. The vulnerability is described as allowing a low-privilege, network-accessible attacker (...

CVE-2017-3491

CVE-2017-3491 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management, subcomponent Limits and Collateral, in Oracle Financial Services Applications. Affected versions are 12.0.1 and 12.1.0. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise th...

CVE-2017-3494

CVE-2017-3494 is a vulnerability in Oracle FLEXCUBE Universal Banking (subcomponent: Retail Teller). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, and 12.0.3. An unauthenticated attacker with network access via HTTP can compromise the component; successful attacks require human interactio...

CVE-2017-3535

CVE-2017-3535 affects the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to com...

CVE-2017-3534

The CVE-2017-3534 vulnerability affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. An attacker with network access via HTTP and low privileges could compromise data confidentiality and gain unauthorized...

CVE-2017-3485

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit vulnerability allows low...

CVE-2017-3483

CVE-2017-3483 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (subcomponent: Limits and Collateral). Affected versions are 12.0.0 and 12.1.0. The vulnerability allows a high-privilege, logon-local attacker to compromise the product and potentially obtain unauthorized access to...

CVE-2017-3477

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-3487

CVE-2017-3487 affects Oracle FLEXCUBE Investor Servicing (Unit Trust subcomponent) in Oracle Financial Services Applications. Affected versions are 12.0.1–12.3.0. The vulnerability is exploitable by a low-privilege, remote attacker over HTTP to modify data, with the potential for unauthorized upd...