Oracle FLEXCUBE Enterprise Limits and Collateral Management Vulnerability
CVE-2017-3492
5.4MEDIUM
Key Information:
- Vendor
- Oracle
- Vendor
- CVE Published:
- 24 April 2017
Summary
A vulnerability in Oracle FLEXCUBE Enterprise Limits and Collateral Management allows low-privileged attackers with network access to exploit the system. This can lead to unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized reading of sensitive information. The affected versions are 12.0.0 and 12.1.0, making it crucial for organizations using these versions to implement appropriate security measures.
Affected Version(s)
FLEXCUBE Enterprise Limits and Collateral Management 12.0.0
FLEXCUBE Enterprise Limits and Collateral Management 12.1.0
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved