CVE-2017-10005: Medium severity oracle flexcube private banking vulnerability
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10005?
CVE-2017-10005 is considered an easily exploitable vulnerability due to its unauthenticated access requirements.
What versions are affected by CVE-2017-10005?
CVE-2017-10005 affects Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, and 12.0.1.
How do I fix CVE-2017-10005?
To fix CVE-2017-10005, apply the latest security patches provided by Oracle for the affected versions.
Can CVE-2017-10005 be exploited remotely?
Yes, CVE-2017-10005 can be exploited by an unauthenticated attacker with network access.
What component is impacted by CVE-2017-10005?
CVE-2017-10005 impacts the Oracle FLEXCUBE Private Banking component within Oracle Financial Services Applications.