Vulnerability in Oracle FLEXCUBE Private Banking Affects Financial Services Applications

CVE-2017-10005

Summary

The Oracle FLEXCUBE Private Banking component within Oracle Financial Services Applications has a vulnerability that can be exploited by an unauthenticated attacker with network access via HTTP. This flaw allows for unauthorized operations such as modification and deletion of data. Although an attack requires human interaction from a third party, successful exploitation can compromise not only FLEXCUBE's data integrity and confidentiality but may also affect interconnected services. Specifically, this vulnerability poses a risk of unauthorized updates, inserts, and deletions of accessible data, alongside potential unauthorized reading of sensitive information.

References