Unauthenticated Access Flaw in Oracle FLEXCUBE Investor Servicing by Oracle

CVE-2019-2736

Summary

An unauthenticated access vulnerability exists in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications. This flaw allows attackers with network access via HTTP to compromise the affected component. Although an attacker requires human interaction to exploit this vulnerability, successful exploitation can lead to unauthorized update, insertion, or deletion of data. It may also permit unauthorized read access to sensitive data within Oracle FLEXCUBE Investor Servicing. This vulnerability affects multiple versions of the product and poses a significant risk to the integrity and confidentiality of accessible data.

References