漏洞标题
N/A
漏洞描述信息
Oracle金融应用程序中的Oracle银行企业发行组件(子组件：核心模块)的漏洞。受影响的技术支持版本是12.3.0, 12.4.0, 12.5.0, 14.0.0和14.1.0。易利用的漏洞允许通过HTTP获取网络访问的低特权攻击者入侵Oracle银行企业发行。成功的攻击需要攻击者之外的人的人类互动，虽然该漏洞在Oracle银行企业发行，但攻击可能显著影响其他产品。利用此漏洞的成功攻击可能导致对Oracle银行企业发行可用数据的部分未经授权的修改、插入或删除访问，以及未经授权的读取访问。CVSS 3.0基础得分为5.4(保密性和完整性影响)。CVSS向量：(CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Corporate Lending accessible data as well as unauthorized read access to a subset of Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Oracle Financial Services Applications Banking Corporate Lending组件安全漏洞
漏洞描述信息
Oracle Financial Services Applications是美国甲骨文（Oracle）公司的一套集核心银行、网上银行和财产管理于一身的金融服务软件。Banking Corporate Lending是其中的一个银行贷款管理组件。 Oracle Financial Services Applications中的Banking Corporate Lending组件的Core module子组件存在安全漏洞。攻击者可利用该漏洞未授权读取、更新、插入或删除数据，影响数据的完整性和保密性。以下版
CVSS信息
N/A
漏洞类别
授权问题