CVE-2018-3037

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3041

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3043

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3045

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3047

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2018-3049

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-2897

CVE-2018-2897 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected supported versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticate...

CVE-2018-2898

CVE-2018-2898 affects Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. An unauthenticated attacker with network access via HTTP can compromise the component, but attacks require user interaction. Impact includes unauthorized update/inse...

CVE-2018-2899

CVE-2018-2899 describes a vulnerability in the Oracle FLEXCUBE Universal Banking component (subcomponent: Infrastructure) of Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, and 14.1.0. The issue is exploitable with network access via HTTP a...

CVE-2018-2974

CVE-2018-2974 concerns Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. The vulnerability is exploitable by a low-privileg...

CVE-2018-2975

The CVE-2018-2975 entry pertains to Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions include 11.3.0, 11.4.0, 12.x, up to 14.1.0. The vulnerability description states an unauthenticated attacker with network access over HTTP can compromise the system and obtain un...

CVE-2018-2980

CVE-2018-2980 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0–14.1.0). The vulnerability permits a low-privilege, network-accessing attacker (via HTTP) to read/write data and cause partial denial of service. CVSS 3.0 base score is 5.4 (I and A...

CVE-2018-2981

The CVE-2018-2981 entry describes a vulnerability in Oracle FLEXCUBE Universal Banking (Infrastructure) affecting multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, 14.1.0). A low-privilege, network-accessible attacker can exploit HTTP to compromise data. Impact includes unauthor...

CVE-2018-2982

CVE-2018-2982 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 11.3.0, 11.4.0, 12.0.1–12.4.0, 14.0.0, 14.1.0. The vulnerability allows a low-privilege, network-accessible attacker over HTTP to access or potentially exfiltrate sensitive data. CVSS3 base score 5.3 (...

CVE-2018-3015

CVE-2018-3015 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, and 14.1.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracl...

CVE-2018-3019

CVE-2018-3019 is a vulnerability in the Oracle FLEXCUBE Universal Banking component (Infrastructure) affecting multiple 11.x–14.x supported versions. The issue enables a low-privileged, network-accessible attacker (HTTP) to compromise data confidentiality and integrity, requiring user interaction...

CVE-2018-3028

CVE-2018-3028 affects the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications . Affected versions are 12.0.4, 12.1.0, 12.3.0 and 12.4.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the service, leading to possib...

CVE-2018-3029

CVE-2018-3029 affects the Oracle FLEXCUBE Investor Servicing component (subcomponent: Infrastructure) in Oracle Financial Services Applications. Affected versions are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3030

CVE-2018-3030 affects Oracle FLEXCUBE Investor Servicing (Oracle Financial Services Applications, Infrastructure subcomponent). Affected versions are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. An attacker with network access over HTTP and low privileges can cause a hang or frequent crash (complete DoS). ...

CVE-2018-3031

CVE-2018-3031 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) on versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to modify or delete certain data and cause partial denial of service. CVSS v3.0 ...