CVE-2017-10005
First published: Tue Aug 08 2017(Updated: )
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle FLEXCUBE Private Banking | =2.0.0 | |
| Oracle FLEXCUBE Private Banking | =2.0.1 | |
| Oracle FLEXCUBE Private Banking | =2.2.0 | |
| Oracle FLEXCUBE Private Banking | =12.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10005?
CVE-2017-10005 is considered an easily exploitable vulnerability due to its unauthenticated access requirements.
What versions are affected by CVE-2017-10005?
CVE-2017-10005 affects Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, and 12.0.1.
How do I fix CVE-2017-10005?
To fix CVE-2017-10005, apply the latest security patches provided by Oracle for the affected versions.
Can CVE-2017-10005 be exploited remotely?
Yes, CVE-2017-10005 can be exploited by an unauthenticated attacker with network access.
What component is impacted by CVE-2017-10005?
CVE-2017-10005 impacts the Oracle FLEXCUBE Private Banking component within Oracle Financial Services Applications.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/severity
- agent/remedy
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle flexcube private banking
- version/oracle flexcube private banking/2.0.0
- version/oracle flexcube private banking/2.0.1
- version/oracle flexcube private banking/2.2.0
- version/oracle flexcube private banking/12.0.1