Oracle FLEXCUBE Universal Banking Multiple Security Vulnerabilities

Bugtraq ID:	104778
Class:	Unknown
CVE:	CVE-2018-3015 CVE-2018-2979 CVE-2018-2974 CVE-2018-2899 CVE-2018-2980 CVE-2018-2981 CVE-2018-3019 CVE-2018-2975
Remote:	Yes
Local:	No
Published:	Jul 18 2018 12:00AM
Updated:	Jul 18 2018 12:00AM
Credit:	Oracle, and Krisorn Phochalam.
Vulnerable:	Oracle FLEXCUBE Universal Banking 14.0 Oracle FLEXCUBE Universal Banking 12.4 Oracle FLEXCUBE Universal Banking 12.3 Oracle FLEXCUBE Universal Banking 12.2 Oracle FLEXCUBE Universal Banking 12.1 Oracle FLEXCUBE Universal Banking 12.0.3 Oracle FLEXCUBE Universal Banking 12.0.2 Oracle FLEXCUBE Universal Banking 12.0.1 Oracle FLEXCUBE Universal Banking 11.4 Oracle FLEXCUBE Universal Banking 11.3 Oracle FLEXCUBE Universal Banking 14.1.0
Not Vulnerable:

Oracle FLEXCUBE Universal Banking Multiple Security Vulnerabilities

Oracle FLEXCUBE Universal Banking is prone to multiple security vulnerabilities.

These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Infrastructure' component is affected.

These vulnerabilities affect the following supported versions:
11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0

Oracle FLEXCUBE Universal Banking Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle FLEXCUBE Universal Banking Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle FLEXCUBE Universal Banking Multiple Security Vulnerabilities

References:

• Oracle Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2018 (Oracle)