Oracle FLEXCUBE Investor Servicing Multiple Security Vulnerabilities

Bugtraq ID:	109199
Class:	Unknown
CVE:	CVE-2019-2841 CVE-2019-2736 CVE-2019-2847 CVE-2019-2843 CVE-2019-2846 CVE-2019-2845
Remote:	Yes
Local:	No
Published:	Jul 16 2019 12:00AM
Updated:	Jul 16 2019 12:00AM
Credit:	Oracle
Vulnerable:	Oracle FLEXCUBE Investor Servicing 14.1 Oracle FLEXCUBE Investor Servicing 14.0 Oracle FLEXCUBE Investor Servicing 12.4 Oracle FLEXCUBE Investor Servicing 12.3 Oracle FLEXCUBE Investor Servicing 12.1 Oracle FLEXCUBE Investor Servicing 12.0.4 Oracle FLEXCUBE Investor Servicing 12.0.3 Oracle FLEXCUBE Investor Servicing 12.0.1
Not Vulnerable:

Oracle FLEXCUBE Investor Servicing Multiple Security Vulnerabilities

Oracle FLEXCUBE Investor Servicing is prone to multiple security vulnerabilities.

These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Infrastructure' sub component is affected.

These vulnerabilities affect the following supported versions:
12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0, 14.1.0

Oracle FLEXCUBE Investor Servicing Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle FLEXCUBE Investor Servicing Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle FLEXCUBE Investor Servicing Multiple Security Vulnerabilities

References:

• Oracle Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2019 (Oracle)