Oracle Flexcube Investor Servicing Vulnerabilidad

Cronología

Versión

12.1.040
12.3.040
12.0.436
12.4.028
12.0.122

Contramedidas

Official Fix44
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined44

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network44

Autenticación

Not Defined0
High0
Low28
None16

La interacción del usuario

Not Defined0
Required8
None36

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤616
≤710
≤84
≤96
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤622
≤74
≤810
≤90
≤104

VulDB

≤10
≤20
≤30
≤42
≤52
≤616
≤710
≤84
≤94
≤106

NVD

≤10
≤20
≤30
≤42
≤52
≤616
≤712
≤82
≤94
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤42
≤52
≤616
≤710
≤84
≤94
≤104

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k2
<10k12
<25k26
<50k2
<100k0
≥100k2

Explotar hoy

<1k38
<2k2
<5k0
<10k2
<25k2
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

Affected Versions (14): 12.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1, 12.2, 12.3, 12.4, 14, 14.0, 14.1, 14.4, 14.5

Link to Product Website: https://www.oracle.com

Tipo de software: Banking Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2021-01-198.38.1Oracle FLEXCUBE Investor Servicing Infrastructure Code Remote Code Execution$25k-$100k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-2351
2020-07-153.73.6Oracle FLEXCUBE Investor Servicing Infrastructure autenticación débil$5k-$25k$0-$5kNot DefinedOfficial Fix0.01CVE-2020-9488
2020-07-157.57.2Oracle FLEXCUBE Investor Servicing Infrastructure denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-12402
2020-07-158.17.7Oracle FLEXCUBE Investor Servicing Infrastructure vulnerabilidad desconocida$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-14569
2020-07-158.27.8Oracle FLEXCUBE Investor Servicing Infrastructure divulgación de información$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2020-1945
2020-07-159.89.4Oracle FLEXCUBE Investor Servicing Infrastructure XML External Entity$25k-$100k$5k-$25kNot DefinedOfficial Fix0.04CVE-2019-13990
2020-01-154.34.1Oracle FLEXCUBE Investor Servicing Infrastructure divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-2724
2020-01-155.45.2Oracle FLEXCUBE Investor Servicing Infrastructure vulnerabilidad desconocida$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-2722
2020-01-155.45.2Oracle FLEXCUBE Investor Servicing Infrastructure vulnerabilidad desconocida$5k-$25k$0-$5kNot DefinedOfficial Fix0.01CVE-2020-2720
2020-01-156.56.2Oracle FLEXCUBE Investor Servicing Infrastructure divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-2721

34 no se muestran más entradas

más entradas por Oracle

Interested in the pricing of exploits?

See the underground prices here!