NotCVE - vendor:"Oracle" product:"Flexcube Universal Banking" version:"12.3.0"

51 results (0.009 seconds)

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2023-22119

https://notcve.org/view.php?id=CVE-2023-22119

17 Oct 2023 — Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized acce... • https://www.oracle.com/security-alerts/cpuoct2023.html •

CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2023-22118

https://notcve.org/view.php?id=CVE-2023-22118

17 Oct 2023 — Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attack... • https://www.oracle.com/security-alerts/cpuoct2023.html •

CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2023-22117

https://notcve.org/view.php?id=CVE-2023-22117

17 Oct 2023 — Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attack... • https://www.oracle.com/security-alerts/cpuoct2023.html •

CVSS: 6.6EPSS: 0%CPEs: 3EXPL: 0

CVE-2022-21579

https://notcve.org/view.php?id=CVE-2022-21579

19 Jul 2022 — Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, ... • https://www.oracle.com/security-alerts/cpujul2022.html •

CVSS: 6.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2022-21578

https://notcve.org/view.php?id=CVE-2022-21578

CVSS: 6.6EPSS: 0%CPEs: 3EXPL: 0

CVE-2022-21577

https://notcve.org/view.php?id=CVE-2022-21577

CVSS: 6.4EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-21576

https://notcve.org/view.php?id=CVE-2022-21576

19 Jul 2022 — Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking accessibl... • https://www.oracle.com/security-alerts/cpujul2022.html •

CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2022-21544

https://notcve.org/view.php?id=CVE-2022-21544

19 Jul 2022 — Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle FLEX... • https://www.oracle.com/security-alerts/cpujul2022.html •

CVSS: 6.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2022-21428

https://notcve.org/view.php?id=CVE-2022-21428

CVSS: 5.9EPSS: 65%CPEs: 213EXPL: 10

CVE-2021-45105 – Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

https://notcve.org/view.php?id=CVE-2021-45105

18 Dec 2021 — Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1. Apache Log4j2 versiones 2.0-alpha1 hasta 2.16.0 (excluyendo las versiones 2.12.3 y 2.3.1) no protegían de la recursión no controlada de las búsquedas autorreferenciales.... • https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832 • CWE-20: Improper Input Validation CWE-674: Uncontrolled Recursion •

1 2 3 4 5