Unauthenticated Access Vulnerability in Oracle FLEXCUBE Direct Banking
CVE-2020-14897
What is CVE-2020-14897?
The vulnerability in Oracle FLEXCUBE Direct Banking within Oracle Financial Services Applications allows an unauthenticated attacker to exploit network access via HTTP. Although successful exploitation relies on human interaction from a user other than the attacker, it poses significant risks by potentially granting unauthorized access to sensitive data. This issue affects multiple supported versions, with attackers being able to compromise the system and access critical data, ultimately leading to data breach incidents.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
FLEXCUBE Direct Banking 12.0.1
FLEXCUBE Direct Banking 12.0.2
FLEXCUBE Direct Banking 12.0.3
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved