← Back

CVE-2018-2747

nvd nist
Published: Apr 19, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected (24)

5 products
Banking Corporate Lending
Banking Payments
Flexcube Investor Servicing
Flexcube Universal Banking
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 12.3.0
Version 12.4.0
Version 12.5.0
Version 14.0.0
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 12.3.0
Version 12.4.0
Version 12.5.0
Version 14.0.0
Configuration C
2 vulnerable
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 12.0.4
Version 12.1.0
Version 12.3.0
Version 12.4.0
Configuration E
10 vulnerable

References (6)

Source: secalert_us@oracle.com
PatchVendor Advisory
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.