Oracle Flexcube Investor Servicing Vulnerabilità

Sequenza temporale

Versione

12.1.038
12.3.038
12.0.433
12.4.027
12.0.118

Contromisure

Official Fix50
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Sfruttabilità

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined50

Accesso al vettore

Not Defined0
Physical0
Local1
Adjacent0
Network49

Autenticazione

Not Defined0
High0
Low31
None19

Interazione dell'utente

Not Defined0
Required12
None38

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤30
≤44
≤52
≤616
≤712
≤86
≤96
≤104

CVSSv3 Temp

≤10
≤20
≤31
≤43
≤52
≤620
≤710
≤89
≤91
≤104

VulDB

≤10
≤20
≤30
≤44
≤52
≤616
≤711
≤87
≤95
≤105

NVD

≤10
≤20
≤30
≤44
≤52
≤616
≤712
≤85
≤94
≤104

CNA

≤10
≤20
≤30
≤40
≤51
≤63
≤71
≤82
≤92
≤100

Fornitore

≤10
≤20
≤30
≤44
≤52
≤616
≤79
≤84
≤94
≤103

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k0
<5k1
<10k17
<25k27
<50k2
<100k3
≥100k0

Exploiter aujourd'hui

<1k40
<2k4
<5k2
<10k1
<25k2
<50k1
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (18): 12.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1, 12.2, 12.3, 12.4, 14, 14.0, 14.1, 14.2, 14.3, 14.4, 14.5, 14.6, 14.7

Link to Product Website: https://www.oracle.com

Tipo di software: Banking Software

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
16/01/20246.66.5Oracle FLEXCUBE Investor Servicing Infrastructure Code escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-2976
16/01/20247.57.3Oracle FLEXCUBE Investor Servicing Infrastructure Code denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-42003
18/07/20236.56.3Oracle FLEXCUBE Investor Servicing Infrastructure Code denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20863
18/07/20236.56.3Oracle FLEXCUBE Investor Servicing Infrastructure Code rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-37533
18/07/20237.57.3Oracle FLEXCUBE Investor Servicing Infrastructure Code denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1370
18/07/20239.39.2Oracle FLEXCUBE Investor Servicing Infrastructure Code escalazione di privilegi$25k-$100k$25k-$100kNot DefinedOfficial Fix0.00CVE-2022-1471
19/01/20218.38.1Oracle FLEXCUBE Investor Servicing Infrastructure Code Remote Code Execution$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-2351
15/07/20203.73.6Oracle FLEXCUBE Investor Servicing Infrastructure autenticazione debole$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-9488
15/07/20207.57.2Oracle FLEXCUBE Investor Servicing Infrastructure denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-12402
15/07/20208.17.7Oracle FLEXCUBE Investor Servicing Infrastructure vulnerabilità sconosciuta$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2020-14569

40 non vengono visualizzate più voci

altre voci di Oracle

Want to stay up to date on a daily basis?

Enable the mail alert feature now!