Summaryinfo

A vulnerability classified as critical was found in Oracle FLEXCUBE Universal Banking 14.5/14.6/14.7. Affected is an unknown function of the component Infrastructure. Such manipulation leads to denial of service. This vulnerability is listed as CVE-2023-34462. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability was found in Oracle FLEXCUBE Universal Banking 14.5/14.6/14.7 (Banking Software). It has been rated as critical. Affected by this issue is an unknown function of the component Infrastructure. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability.

The weakness was presented 10/17/2023 as Oracle Critical Patch Update Advisory - October 2023. The advisory is shared for download at oracle.com. This vulnerability is handled as CVE-2023-34462. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1499.

A possible mitigation has been published immediately after the disclosure of the vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Banking Software

Vendor

• Oracle

Name

• FLEXCUBE Universal Banking

Version

• 14.5
• 14.6
• 14.7

License

• commercial

Website

• Vendor: https://www.oracle.com

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion