CVE-2018-3032

CVE-2018-3032 affects Oracle FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.0.4, 12.1.0, 12.3.0, 12.4.0. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to potentially update/insert/delete and read certain data. CVSS v3.0 base score is 5.4 (Co...

CVE-2018-3033

Affected product: Oracle FLEXCUBE Investor Servicing (Infrastructure) in Oracle Financial Services Applications. Vulnerable versions: 12.0.4, 12.1.0, 12.3.0, 12.4.0. Risk and impact: Low-privilege attacker with HTTP network access can compromise the service, leading to unauthorized access to sens...

CVE-2018-3035

CVE-2018-3035 affects Oracle’s FLEXCUBE Investor Servicing (Infrastructure) with affected versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability allows a low-privilege, unauthenticated attacker with network access over HTTP to compromise FLEXCUBE Investor Servicing, potentially enabling un...

CVE-2018-3037

CVE-2018-3037 affects Oracle Financial Services Applications’ FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure). Affects versions 12.3.0, 14.0.0, 14.1.0. Root cause described as an access control error enabling a low-privilege, network-access attacker (via HTTP) to read, updat...

CVE-2018-3039

CVE-2018-3039 describes a vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 12.3.0, 14.0.0 and 14.1.0. The issue allows an unauthenticated attacker with network...

CVE-2018-3041

CVE-2018-3041 affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component (Oracle Financial Services Applications), specifically the Infrastructure subcomponent. Affected versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability allows a low-privileged attacker with network ...

CVE-2018-3045

The CVE-2018-3045 entry concerns Oracle FLEXCUBE Enterprise Limits and Collateral Management (part of Oracle Financial Services Applications, Infrastructure subcomponent). Affected versions are 12.3.0, 14.0.0 and 14.1.0. An attacker with network access over HTTP and low privileges can exploit thi...

CVE-2018-3047

The CVE-2018-3047 issue affects Oracle FLEXCUBE Enterprise Limits and Collateral Management within Oracle Financial Services Applications (Infrastructure subcomponent). Affected versions are 12.3.0, 14.0.0 and 14.1.0. It is described as an access-control error vulnerability that could allow an at...

CVE-2018-3049

CVE-2018-3049 affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability allows a low-privileged attacker with network access via HTT...

CVE-2018-3051

CVE-2018-3051 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Oracle Financial Services Applications), specifically the Infrastructure subcomponent. Connected sources describe an access control error in FLEXCUBE Enterprise Limits and Collateral Management that can allow a low...

CVE-2018-3043

CVE-2018-3043 is an access-control vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component (Oracle Financial Services Applications), subcomponent Infrastructure. Affected versions are 12.3.0, 14.0.0, and 14.1.0. The issue allows a low-privileged, network-based a...

CVE-2018-2979

CVE-2018-2979 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0, 11.4.0, 12.x up to 14.1.0). The vulnerability is a Denial of Service: a low-privileged attacker with network access via HTTP can cause a hang or frequent crash of the system. CVSS ...

CVE-2018-3034

CVE-2018-3034 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) across versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to compromise the service, with exploitation requiring user interaction. Consequen...

Oracle FLEXCUBE Universal Banking Information Disclosure Vulnerability

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An information disclosure vulnerability exists in the Infrastructure component in Oracle FLEXCUBE Universal Banking. An attacker could exploit th...

Oracle FLEXCUBE Universal Banking Information Disclosure Vulnerability (CNVD-2018-24134)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An information disclosure vulnerability exists in the Infrastructure component in Oracle FLEXCUBE Universal Banking. An attacker could exploit th...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24135)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24136)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24137)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component in Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24139)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24138)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...