cbcvebase.

Oracle Flexcube Investor Servicing vulnerabilities

45 known vulnerabilities affecting oracle/flexcube_investor_servicing.

Total CVEs
45
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH10MEDIUM30LOW3

Vulnerabilities

Page 2 of 3
CVE-2018-3029P4MEDIUMCVSS 5.3v12.0.4v12.1.0+2 more2018-07-18
CVE-2018-3029 [MEDIUM] CVE-2018-3029: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. S
nvd
CVE-2018-3033P4MEDIUMCVSS 5.3v12.0.4v12.1.0+2 more2018-07-18
CVE-2018-3033 [MEDIUM] CVE-2018-3033: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing.
nvd
CVE-2018-3032P4MEDIUMCVSS 5.4v12.0.4v12.1.0+2 more2018-07-18
CVE-2018-3032 [MEDIUM] CVE-2018-3032: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Su
nvd
CVE-2017-3288P4MEDIUMCVSS 5.4v12.0.1v12.0.2+5 more2017-04-24
CVE-2017-3288 [MEDIUM] CVE-2017-3288: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE
nvd
CVE-2019-2846P4MEDIUMCVSS 5.3v12.0.1v12.0.3+6 more2019-07-23
CVE-2019-2846 [MEDIUM] CVE-2019-2846: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl
nvd
CVE-2019-2843P4MEDIUMCVSS 5.4v12.0.1v12.0.3+6 more2019-07-23
CVE-2019-2843 [MEDIUM] CVE-2019-2843: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle
nvd
CVE-2018-2898P4MEDIUMCVSS 6.1v12.0.4v12.1.0+2 more2018-07-18
CVE-2018-2898 [MEDIUM] CVE-2018-2898: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. S
nvd
CVE-2018-2748P4MEDIUMCVSS 6.1v12.0.4v12.1.0+2 more2018-04-19
CVE-2018-2748 [MEDIUM] CVE-2018-2748: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applica Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successf
nvd
CVE-2016-8319P4MEDIUMCVSS 6.1v12.0.1v12.0.2+3 more2017-01-27
CVE-2016-8319 [MEDIUM] CWE-284 CVE-2016-8319: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicin
nvd
CVE-2019-2736P4MEDIUMCVSS 6.1v12.0.1v12.0.3+6 more2019-07-23
CVE-2019-2736 [MEDIUM] CVE-2019-2736: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl
nvd
CVE-2018-3031P4MEDIUMCVSS 5.4v12.0.4v12.1.0+2 more2018-07-18
CVE-2018-3031 [MEDIUM] CVE-2018-3031: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Su
nvd
CVE-2017-3489P4MEDIUMCVSS 5.4v12.0.1v12.0.2+5 more2017-04-24
CVE-2017-3489 [MEDIUM] CVE-2017-3489: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Management System). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise
nvd
CVE-2016-8306P4MEDIUMCVSS 5.4v12.0.1v12.0.2+3 more2017-01-27
CVE-2016-8306 [MEDIUM] CWE-254 CVE-2016-8306: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing
nvd
CVE-2020-2720P4MEDIUMCVSS 5.4≥ 12.1.0, ≤ 12.4.0≥ 14.0.0, ≤ 14.1.02020-01-15
CVE-2020-2720 [MEDIUM] CVE-2020-2720: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applica Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successfu
nvd
CVE-2016-8317P4MEDIUMCVSS 5.3v12.0.1v12.0.2+3 more2017-01-27
CVE-2016-8317 [MEDIUM] CWE-284 CVE-2016-8317: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor S
nvd
CVE-2019-10219P4MEDIUMCVSS 6.1v12.0.4v12.1.0+4 more2019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2020-2722P4MEDIUMCVSS 5.4≥ 12.1.0, ≤ 12.4.0≥ 14.0.0, ≤ 14.1.02020-01-15
CVE-2020-2722 [MEDIUM] CVE-2020-2722: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applica Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successf
nvd
CVE-2018-3034P4MEDIUMCVSS 5.4v12.0.4v12.1.0+2 more2018-07-18
CVE-2018-3034 [MEDIUM] CVE-2018-3034: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Su
nvd
CVE-2018-2749P4MEDIUMCVSS 5.4v12.0.4v12.1.0+2 more2018-04-19
CVE-2018-2749 [MEDIUM] CVE-2018-2749: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applica Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successfu
nvd
CVE-2016-8316P4MEDIUMCVSS 5.4v12.0.1v12.0.2+3 more2017-01-27
CVE-2016-8316 [MEDIUM] CWE-284 CVE-2016-8316: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Appli Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing
nvd
← Previous2 / 3Next →
Oracle Flexcube Investor Servicing vulnerabilities | cvebase