PT-2017-15924
CVE-2017-3487
·
Published
2017-04-24
·
Updated
2019-10-03
Description by
CVSS 2.0
3.5
LowMetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle FLEXCUBE Investor Servicing versions 12.0.1 through 12.3.0
Description
The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks can result in unauthorized update, insert, or delete access to some of the accessible data.
Recommendations
For versions 12.0.1 through 12.3.0, update to a version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾