oracle flexcube core banking 11.7.0 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Securities). Supported versions that are affected are 11.5.0, 11.6.0 and 11.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

Oracle Flexcube Core Banking 11.5.0 Oracle Flexcube Core Banking 11.6.0 Oracle Flexcube Core Banking 11.7.0

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...

Apache Axis 1.4 Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Flexcube Private Banking 12.1.0 Oracle Primavera Unifier 16.2 Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2 Oracle Retail Xstore Point Of Service 7.1 Oracle Enterprise Manager Base Platform 12.1.0.5 Oracle Flexcube Private Banking 12.0.0 Oracle Primavera Unifier 16.1 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Hospitality Guest Access 4.2.0 Oracle Hospitality Guest Access 4.2.1 Oracle Tuxedo 12.1.3 Oracle Internet Directory 12.2.1.3.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Communications Order And Service Management 7.3.0.0.0 Oracle Flexcube Core Banking 11.7.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Secure Global Desktop 5.4 Oracle Retail Order Broker 15.0

1 EDB exploit2 Github repositories

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Apache Axis Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Flexcube Private Banking 12.1.0 Oracle Primavera Unifier 16.2 Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2 Oracle Retail Xstore Point Of Service 7.1 Oracle Enterprise Manager Base Platform 12.1.0.5 Oracle Flexcube Private Banking 12.0.0 Oracle Primavera Unifier 16.1 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Hospitality Guest Access 4.2.0 Oracle Hospitality Guest Access 4.2.1 Oracle Tuxedo 12.1.3 Oracle Internet Directory 12.2.1.3.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Communications Order And Service Management 7.3.0.0.0 Oracle Flexcube Core Banking 11.7.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Secure Global Desktop 5.4 Oracle Retail Order Broker 15.0

dom4j prior to 2.0.3 and 2.1.x prior to 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j...

Dom4j Project Dom4j Oracle Insurance Policy Administration J2ee 10.2.0 Oracle Insurance Rules Palette 10.2.0 Oracle Retail Integration Bus 15.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Webcenter Portal 11.1.1.9.0 Oracle Utilities Framework 4.2.0.3.0 Oracle Utilities Framework 4.2.0.2.0 Oracle Utilities Framework 2.2.0.0.0 Oracle Flexcube Core Banking 11.7.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Endeca Information Discovery Integrator 3.2.0 Oracle Application Testing Suite 13.3.0.1 Oracle Retail Order Broker 15.0 Oracle Retail Order Broker 16.0 Oracle Retail Integration Bus 16.0 Oracle Retail Customer Management And Segmentation Foundation 16.0 Oracle Retail Customer Management And Segmentation Foundation 17.0 Oracle Retail Customer Management And Segmentation Foundation 18.0 Oracle Enterprise Data Quality 12.2.1.3.0 Oracle Data Integrator 12.2.1.3.0 Oracle Utilities Framework 4.4.0.0.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook