Vulnerability in Oracle Banking Payments Component of Oracle Financial Services Applications
CVE-2018-3026

5.4MEDIUM

Key Information:

Vendor
Oracle
Status
Banking Payments
Vendor
CVE Published:
18 July 2018

Summary

The vulnerability affects Oracle Banking Payments, allowing low privileged attackers with network access to potentially compromise sensitive banking data. Exploitation requires the involvement of a user, making it a social engineering issue as well. Successful exploitation can lead to unauthorized modifications, deletions, or reads of accessible data, posing serious risks to the integrity and confidentiality of the information managed by Oracle Banking Payments. Additionally, due to the interconnected nature of financial applications, this vulnerability might impact other dependent systems, creating a broader threat landscape.

Affected Version(s)

Banking Payments 12.2.0

Banking Payments 12.3.0

Banking Payments 12.4.0

References

http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/104790
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1041307
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.