Vulnerability in Oracle FLEXCUBE Direct Banking Affects Multiple Versions
CVE-2020-14890

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Flexcube Direct Banking
Vendor
CVE Published:
21 October 2020

What is CVE-2020-14890?

A vulnerability exists in the Oracle FLEXCUBE Direct Banking product that allows an unauthenticated attacker with network access via HTTP to compromise the system. This flaw affects supported versions 12.0.1, 12.0.2, and 12.0.3. While successful exploitation requires human interaction from a user other than the attacker, it can lead to unauthorized access to sensitive data, potentially exposing critical information within the FLEXCUBE Direct Banking environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FLEXCUBE Direct Banking 12.0.1

FLEXCUBE Direct Banking 12.0.2

FLEXCUBE Direct Banking 12.0.3

References

https://www.oracle.com/security-alerts/cpuoct2020.html
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.