漏洞标题
N/A
漏洞描述信息
"Oracle金融服务应用程序中的Oracle flexcUBE企业限制和担保管理组件(子组件:核心)的漏洞。受影响的支持版本是12.0.0和12.0.2。容易利用的漏洞允许通过HTTP协议无身份攻击者入侵Oracle flexcUBE企业限制和担保管理。成功的攻击需要非攻击者的人类互动,虽然漏洞在Oracle flexcUBE企业限制和担保管理中,但攻击可能显著影响其他产品。此漏洞的成功攻击可能导致未经授权的对Oracle flexcUBE企业限制和担保管理可访问数据的部分更新、插入或删除访问,以及未经授权的对Oracle flexcUBE企业限制和担保管理可访问数据的部分读取访问。CVSS v3.0基础得分6.1(保密性和完整性影响)。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.0 and 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts).
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Oracle FLEXCUBE Enterprise Limits and Collateral Management 安全漏洞
漏洞描述信息
Oracle Financial Services Applications是美国甲骨文(Oracle)公司的一套集核心银行、网上银行和财产管理于一身的金融服务软件。Oracle FLEXCUBE Enterprise Limits and Collateral Management是其中的一个用于管理整个企业的产品在线实时曝光的组件。 Oracle Financial Services Applications中的Oracle FLEXCUBE Enterprise Limits and Collate
CVSS信息
N/A
漏洞类别
授权问题