Aller au contenu
en Se connecter
Non notée

CVE-2017-3495 Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent:…

Description

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Direct Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
FLEXCUBE Direct Banking 12.0 12.0.2 → 12.0.3 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FLEXCUBE Direct Banking

Les 10 CVE de FLEXCUBE Direct Banking →
CVE-2021-2141 Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre… 2.0 Faible CVE-2020-14897 Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre… 6.5 Moyenne CVE-2020-14890 Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre… 6.5 Moyenne CVE-2019-2979 Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component:… Non notée
Suivre cette CVE