CVE-2018-3029

CVE-2018-3029 affects the Oracle FLEXCUBE Investor Servicing component (subcomponent: Infrastructure) in Oracle Financial Services Applications. Affected versions are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3043

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-2897

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2018-2980

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-3019

CVE-2018-3019 is a vulnerability in the Oracle FLEXCUBE Universal Banking component (Infrastructure) affecting multiple 11.x–14.x supported versions. The issue enables a low-privileged, network-accessible attacker (HTTP) to compromise data confidentiality and integrity, requiring user interaction...

CVE-2018-3019

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-3041

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3034

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3037

CVE-2018-3037 affects Oracle Financial Services Applications’ FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure). Affects versions 12.3.0, 14.0.0, 14.1.0. Root cause described as an access control error enabling a low-privilege, network-access attacker (via HTTP) to read, updat...

CVE-2018-3031

CVE-2018-3031 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) on versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to modify or delete certain data and cause partial denial of service. CVSS v3.0 ...

CVE-2018-2897

CVE-2018-2897 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected supported versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticate...

CVE-2018-3028

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3045

The CVE-2018-3045 entry concerns Oracle FLEXCUBE Enterprise Limits and Collateral Management (part of Oracle Financial Services Applications, Infrastructure subcomponent). Affected versions are 12.3.0, 14.0.0 and 14.1.0. An attacker with network access over HTTP and low privileges can exploit thi...

CVE-2018-2980

CVE-2018-2980 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0–14.1.0). The vulnerability permits a low-privilege, network-accessing attacker (via HTTP) to read/write data and cause partial denial of service. CVSS 3.0 base score is 5.4 (I and A...

CVE-2018-2979

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-2974

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-3031

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3047

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2018-3030

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3041

CVE-2018-3041 affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component (Oracle Financial Services Applications), specifically the Infrastructure subcomponent. Affected versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability allows a low-privileged attacker with network ...