Non notée
CVE-2017-3479 Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications…
Description
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Private Banking. CVSS 3.0 Base Score 5.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FLEXCUBE Private Banking | 12.0.1 | Pas de correctif indiqué |
| FLEXCUBE Private Banking | 2.2.0.1 | Pas de correctif indiqué |
| FLEXCUBE Private Banking 2.0 | 2.0.0 → 2.0.1 | Pas de correctif indiqué |
Références
- www.oracle.com www.oracle.com
- 1038304 www.securitytracker.com
- 97805 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FLEXCUBE Private Banking
Les 19 CVE de FLEXCUBE Private Banking →
CVE-2017-10005
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications…
Non notée
CVE-2017-10012
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications…
Non notée
CVE-2017-10022
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications…
Non notée
CVE-2017-10007
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications…
Non notée