Oracle FLEXCUBE Universal Banking Vulnerability in Infrastructure Component

CVE-2020-2699

Summary

An access control vulnerability in Oracle FLEXCUBE Universal Banking, specifically within the Infrastructure component, allows low-privileged attackers with network access via HTTP to potentially compromise sensitive data. Successful exploitation could lead to unauthorized access to critical information stored within the database, as well as the ability to modify, insert, or delete data that the attacker can access. This vulnerability underscores the need for robust security measures and timely application of patches.

References