Oracle Flexcube Investor Servicing Vulnerabilidad

Cronología

Versión

12.1.0	38
12.3.0	38
12.0.4	33
12.4.0	27
12.0.1	18

Contramedidas

Official Fix	50
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	50

Vector de acceso

Not Defined	0
Physical	0
Local	1
Adjacent	0
Network	49

Autenticación

Not Defined	0
High	0
Low	31
None	19

La interacción del usuario

Not Defined	0
Required	12
None	38

C3BM Index

El año pasado

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	16
≤7	12
≤8	6
≤9	6
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	3
≤5	2
≤6	20
≤7	10
≤8	9
≤9	1
≤10	4

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	16
≤7	11
≤8	7
≤9	5
≤10	5

NVD

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	16
≤7	12
≤8	5
≤9	4
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	3
≤7	1
≤8	2
≤9	2
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	16
≤7	9
≤8	4
≤9	4
≤10	3

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	0
<5k	1
<10k	17
<25k	27
<50k	2
<100k	3
≥100k	0

Explotar hoy

<1k	40
<2k	3
<5k	3
<10k	1
<25k	2
<50k	1
<100k	0
≥100k	0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (18): 12.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1, 12.2, 12.3, 12.4, 14, 14.0, 14.1, 14.2, 14.3, 14.4, 14.5, 14.6, 14.7

Link to Product Website: https://www.oracle.com

Tipo de software: Banking Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-01-16	6.6	6.5	Oracle FLEXCUBE Investor Servicing Infrastructure Code escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-2976
2024-01-16	7.5	7.3	Oracle FLEXCUBE Investor Servicing Infrastructure Code denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-42003
2023-07-18	6.5	6.3	Oracle FLEXCUBE Investor Servicing Infrastructure Code denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-20863
2023-07-18	6.5	6.3	Oracle FLEXCUBE Investor Servicing Infrastructure Code divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-37533
2023-07-18	7.5	7.3	Oracle FLEXCUBE Investor Servicing Infrastructure Code denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-1370
2023-07-18	9.3	9.2	Oracle FLEXCUBE Investor Servicing Infrastructure Code escalada de privilegios	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.00	CVE-2022-1471
2021-01-19	8.3	8.1	Oracle FLEXCUBE Investor Servicing Infrastructure Code Remote Code Execution	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-2351
2020-07-15	3.7	3.6	Oracle FLEXCUBE Investor Servicing Infrastructure autenticación débil	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-9488
2020-07-15	7.5	7.2	Oracle FLEXCUBE Investor Servicing Infrastructure denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-12402
2020-07-15	8.1	7.7	Oracle FLEXCUBE Investor Servicing Infrastructure vulnerabilidad desconocida	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14569

40 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 40 results.

más entradas por Oracle

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!