Oracle FLEXCUBE Direct Banking Multiple Remote Security Vulnerabilities

Bugtraq ID:	106613
Class:	Unknown
CVE:	CVE-2019-2549 CVE-2019-2550
Remote:	Yes
Local:	No
Published:	Jan 15 2019 12:00AM
Updated:	Jan 15 2019 12:00AM
Credit:	Mohamed Yusuf of SecureMisr.
Vulnerable:	Oracle FLEXCUBE Direct Banking 12.0.2
Not Vulnerable:

Oracle FLEXCUBE Direct Banking Multiple Remote Security Vulnerabilities

Oracle FLEXCUBE Direct Banking is prone to multiple remote security vulnerabilities.

These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Logoff Page' component is affected.

These vulnerabilities affect the following supported versions:
12.0.2

Oracle FLEXCUBE Direct Banking Multiple Remote Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle FLEXCUBE Direct Banking Multiple Remote Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle FLEXCUBE Direct Banking Multiple Remote Security Vulnerabilities

References:

• Oracle Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - January 2019 (Oracle)