CVE-2020-2723

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.1.0 through 12.4.0 Oracle FLEXCUBE Investor Servicing versions 14.0.0 through 14.1.0

Description The issue is related to inadequate access control in the Infrastructure component of Oracle FLEXCUBE Investor Servicing, allowing an attacker to compromise the system via HTTP protocol. Successful attacks can result in unauthorized access to critical data, as well as unauthorized update, insert, or delete access to some data.

Recommendations For versions 12.1.0 through 12.4.0, update to a version outside of this range to resolve the issue. For versions 14.0.0 through 14.1.0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the Infrastructure component until a patch is available. Restrict access to sensitive data and implement additional security measures to minimize the risk of exploitation.