CVE-2018-2897

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-3037

CVE-2018-3037 affects Oracle Financial Services Applications’ FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure). Affects versions 12.3.0, 14.0.0, 14.1.0. Root cause described as an access control error enabling a low-privilege, network-access attacker (via HTTP) to read, updat...

CVE-2018-3041

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-2897

CVE-2018-2897 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected supported versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability is exploitable over HTTP with network access by an unauthenticate...

CVE-2018-3041

CVE-2018-3041 affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component (Oracle Financial Services Applications), specifically the Infrastructure subcomponent. Affected versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability allows a low-privileged attacker with network ...

CVE-2018-3045

The CVE-2018-3045 entry concerns Oracle FLEXCUBE Enterprise Limits and Collateral Management (part of Oracle Financial Services Applications, Infrastructure subcomponent). Affected versions are 12.3.0, 14.0.0 and 14.1.0. An attacker with network access over HTTP and low privileges can exploit thi...

CVE-2018-3051

CVE-2018-3051 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (Oracle Financial Services Applications), specifically the Infrastructure subcomponent. Connected sources describe an access control error in FLEXCUBE Enterprise Limits and Collateral Management that can allow a low...

CVE-2018-3039

CVE-2018-3039 describes a vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 12.3.0, 14.0.0 and 14.1.0. The issue allows an unauthenticated attacker with network...

CVE-2018-2897

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2018-3043

CVE-2018-3043 is an access-control vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component (Oracle Financial Services Applications), subcomponent Infrastructure. Affected versions are 12.3.0, 14.0.0, and 14.1.0. The issue allows a low-privileged, network-based a...

CVE-2018-3049

CVE-2018-3049 affects the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 12.3.0, 14.0.0 and 14.1.0. The vulnerability allows a low-privileged attacker with network access via HTT...

PT-2019-8041 · Pcre +2 · Pcre +2

Name of the Vulnerable Software and Affected Versions: PCRE version 8.41 Description: The issue is related to a crash overflow in the function match in pcre exec.c due to a self-recursive call. This occurs after compiling and running a pcretest load test proof of concept. It's worth noting that...

Security Bulletin: Vulnerability in Apache Tomcat affects IBM Algo Credit Limits (CVE-2016-3092)

Summary Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component, and is supplied with IBM Algo Credit Limits. By sending file upload requests, an attacker could exploit this vulnerability to cause the server to become unresponsive...

Security Bulletin: Vulnerability in Apache Commons affects IBM Algo Credit Limits (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by IBM Algo Credit Limits. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Algo Credit Limits (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Algo Credit Limits. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly...

Security Bulletin: Vulnerability in RC4 stream cipher affects Algo Credit Limits (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects Algo Credit Limits. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this...

Security Bulletin: Vulnerabilities in OpenSSL affect Algo Credit Limits (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)

Summary OpenSSL vulnerabilities along with SSL 3 Fallback protection TLSFALLBACKSCSV were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by Algo Credit Limits. Algo Credit Limits has addressed the applicable CVEs and included the SSL 3.0 Fallback protection TLSFALLBACKSCSV...

Security Bulletin: Vulnerability in SSLv3 affects Algo Credit Limits (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in Algo Credit Limits Vulnerability Details CVE-ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attacker to obtain sensitive...

Security Bulletin: Multiple Security Vulnerabilities in Certain GUI Components of IBM Algo Credit Limits.

Summary Abstract: Multiple security vulnerabilities exist in certain GUI components of IBM Algo Credit Limits, namely ACLM Web GUI, PDS Blotter Web GUI, and ACLM Win GUI. Details of each vulnerability and the affected components are set out below. Vulnerability Details DESCRIPTION: Customers who...