CVE-2019-2736

4 documents4 sources
Severity
6.1MEDIUM
EPSS
0.5%
top 34.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Flexcube Investor ServicingOracle Flexcube Investor Servicing
Timeline
PublishedJul 23
Latest updateMay 24

Description

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks require human interaction from a person other than the attacker and while the vulnerabili…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cvq5-2x48-hpxj: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure)↗2022-05-24
▶
CVEList
CVE-2019-2736: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure)↗2019-07-23
▶

💬Community

1
Bugzilla
CVE-2019-1010251 suricata: denial of service in app-layer-detect-proto.c, decode.c, decode-teredo.c and decode-ipv6.c↗2019-08-01
▶