Vulnerability in Oracle Banking Corporate Lending
CVE-2018-3046
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Oracle Banking_corporate_lending — versions 12.3.0, 12.4.0, 12.5.0
- Oracle Corporation Banking Corporate Lending — versions 12.3.0, 12.4.0, 12.5.0
References
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert_us@oracle.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secalert_us@oracle.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-3046?
- CVE-2018-3046 is a medium-severity vulnerability in Oracle Banking Corporate Lending. CVSS score: 5.3/10. Published 2018-07-18.
- How severe is CVE-2018-3046?
- Medium severity. CVSS v3 base score is 5.3 out of 10.