CVE-2017-3489

CVE-2017-3489 affects Oracle FLEXCUBE Investor Servicing (Security Management System subcomponent) within Oracle Financial Services Applications. Affected versions include 12.0.1–12.3.0. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to perform unauthorized update/i...

CVE-2017-3484

The CVE-2017-3484 entry affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications, specifically versions 12.0.0 and 12.1.0 . The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise data, pot...

CVE-2017-3476

CVE-2017-3476 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) of Oracle Financial Services Applications. Affected versions: 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1. The vulnerability is exploitable by a low-privilege, network-accessible attacker over HTTP, potentially leading to u...

CVE-2017-3535

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3495

Oracle FLEXCUBE Direct Banking (Pre-Login) vulnerability CVE-2017-3495 exists in Oracle Financial Services Applications. Connected sources corroborate affected versions 12.0.2 and 12.0.3 and describe an unauthenticated, network-accessible issue via HTTP in the Pre-Login subcomponent that can lead...

CVE-2017-3490

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2017-3484

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker...

CVE-2017-3477

The CVE-2017-3477 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in Oracle Financial Services Applications, specifically versions 12.0.0 and 12.1.0. The CNVD entry states an attacker could exploit the issue to unauthorizedly read, update, insert, or delete dat...

CVE-2017-3475

CVE-2017-3475 affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous). According to the sources, affected versions are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to impact availability, enabling a p...

CVE-2017-3487

CVE-2017-3487 affects Oracle FLEXCUBE Investor Servicing (Unit Trust subcomponent) in Oracle Financial Services Applications. Affected versions are 12.0.1–12.3.0. The vulnerability is exploitable by a low-privilege, remote attacker over HTTP to modify data, with the potential for unauthorized upd...

CVE-2017-3481

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access via HT...

CVE-2017-3496: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3487: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attack...

CVE-2017-3479: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3475: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

CVE-2017-3473: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...

PT-2017-15752

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks can result in unauthoriz...

CVE-2017-3477: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-15931

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require...

PT-2017-15919

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.0.0 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction...