CVE-2017-10008

The CVE-2017-10008 entry concerns Oracle FLEXCUBE Private Banking (Oracle Financial Services Applications) in subcomponent Miscellaneous. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privileged attacker with network access via HTTP to read data from Oracle ...

CVE-2017-10009

The CVE-2017-10009 entry affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) within Oracle Financial Services Applications. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The vulnerability enables a low-privileged attacker with network access via HTTP to perform unauthori...

CVE-2017-10010

CVE-2017-10010 affects Oracle FLEXCUBE Private Banking’s FileUploads in Oracle Financial Services Applications. A remote, low-privilege attacker with network access via HTTP can, with user interaction, corrupt data through unauthorized update/insert/delete and read access. Affected versions: 2.0....

CVE-2017-10011

The CVE-2017-10011 entry targets Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) within Oracle Financial Services Applications. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privilege user who can log on to the hosting infrastructure to comprom...

CVE-2017-10012

CVE-2017-10012 (Oracle FLEXCUBE Private Banking) affects Oracle Financial Services Applications, FLEXCUBE Private Banking; Operations subcomponent. Affected versions: 2.0.0, 2.0.1, 2.2.0, and 12.0.1. The vulnerability allows a low-privilege attacker with network access via HTTP to perform unautho...

CVE-2017-10022

Oracle FLEXCUBE Private Banking (Operations subcomponent) in Oracle Financial Services Applications is affected for versions 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privileged attacker who can access over HTTP to read a subset of data, indicating an unauthorized read access...

CVE-2017-10023

CVE-2017-10023 is a vulnerability in Oracle FLEXCUBE Private Banking (Oracle Financial Services Applications), subcomponent Operations. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The issue allows a low‑privileged attacker with network access via HTTP to compromise the Private Banking c...

CVE-2017-10071

CVE-2017-10071 affects Oracle FLEXCUBE Universal Banking within Oracle Financial Services Applications (subcomponents: All Modules). Affected versions include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. The vulnerability allows an unauthenticated attacker with network acces...

CVE-2017-10072

CVE-2017-10072 affects Oracle FLEXCUBE Universal Banking in Oracle Financial Services Applications. Affected versions include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data: unau...

CVE-2017-10084

The CVE-2017-10084 entry concerns Oracle FLEXCUBE Universal Banking, specifically the Report Generator subcomponent. Affected releases include 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to comp...

CVE-2017-10085

The CVE-2017-10085 entry concerns Oracle FLEXCUBE Universal Banking (Infrastructure) in Oracle Financial Services Applications. Affects versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, and 12.3.0. The vulnerability allows a low-privileged attacker with network access over HTTP to ...

CVE-2017-10103

CVE-2017-10103 describes a vulnerability in the Oracle FLEXCUBE Private Banking component (Miscellaneous subcomponent) of Oracle Financial Services Applications. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The issue allows a low-privileged attacker who can reach the system over HTTP via...

CVE-2017-10181

The CVE-2017-10181 entry concerns Oracle FLEXCUBE Direct Banking (Forgot Password) in Oracle Financial Services Applications. Affected version: 12.0.2 and 12.0.3. Description: a low-privileged, network-accessible attacker via HTTP can exploit this vulnerability to cause a hang/frequent crash (DOS...

CVE-2017-10006

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10008

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10103

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10083

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows...

CVE-2017-10071

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: All Modules. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated...

CVE-2017-10007

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10010

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: FileUploads. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...