Vulnerability in Oracle Banking Corporate Lending
CVE-2018-2709
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Oracle Banking_corporate_lending — versions 12.3.0, 12.4.0
- Oracle Corporation Banking Corporate Lending — versions 12.3.0, 12.4.0
References
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert_us@oracle.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secalert_us@oracle.com (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-2709?
- CVE-2018-2709 is a medium-severity vulnerability in Oracle Banking Corporate Lending. CVSS score: 5.3/10. Published 2018-01-18.
- How severe is CVE-2018-2709?
- Medium severity. CVSS v3 base score is 5.3 out of 10.