Unauthorized Access Vulnerability in Oracle FLEXCUBE Investor Servicing by Oracle

CVE-2020-2723

Summary

A vulnerability exists in Oracle FLEXCUBE Investor Servicing, part of Oracle Financial Services Applications, that permits low-privileged attackers with network access via HTTP to potentially compromise the system. Exploiting this vulnerability can lead to unauthorized access to sensitive data within Oracle FLEXCUBE Investor Servicing. Attackers may gain complete access to all accessible data and have the ability to perform unauthorized operations such as update, insert, or delete on some of the data stored in the system. This highlights the necessity for prompt remediation to protect critical information.

References