Oracle FLEXCUBE Investor Servicing Vulnerability in Financial Services Applications
CVE-2019-2847

5.7MEDIUM

Key Information:

Vendor

Oracle
Status
Flexcube Investor Servicing
Vendor
CVE Published:
23 July 2019

What is CVE-2019-2847?

A vulnerability exists in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications, enabling low privileged attackers with network access via HTTP to potentially compromise the system. Exploitation of this vulnerability necessitates user interaction from an entity other than the attacker. Successful exploitation can lead to unauthorized access to sensitive data or total access to data within the Oracle FLEXCUBE Investor Servicing platform, posing serious risks to data confidentiality.

Affected Version(s)

FLEXCUBE Investor Servicing 12.0.1

FLEXCUBE Investor Servicing 12.0.3

FLEXCUBE Investor Servicing 12.0.4

References

http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_MISC

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.