PT-2017-15928

CVE-2017-3491

·

Published

2017-04-24

·

Updated

2019-10-03

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management version 12.0.1 Oracle FLEXCUBE Enterprise Limits and Collateral Management version 12.1.0
Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management, resulting in unauthorized access to critical data or complete access to all accessible data.
Recommendations For Oracle FLEXCUBE Enterprise Limits and Collateral Management version 12.0.1, update to a version that includes a fix for this issue. For Oracle FLEXCUBE Enterprise Limits and Collateral Management version 12.1.0, update to a version that includes a fix for this issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2017-3491
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com