CVE-2017-10022: Medium severity oracle flexcube private banking vulnerability
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10022?
CVE-2017-10022 is classified as an easily exploitable vulnerability that poses a significant risk to affected Oracle FLEXCUBE Private Banking versions.
Which versions are affected by CVE-2017-10022?
CVE-2017-10022 affects Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, and 12.0.1.
How do I fix CVE-2017-10022?
To fix CVE-2017-10022, update your Oracle FLEXCUBE Private Banking installation to the latest patched version provided by Oracle.
What impact does CVE-2017-10022 have on my systems?
CVE-2017-10022 allows low privileged attackers with network access via HTTP to exploit the vulnerability, potentially leading to unauthorized actions.
Can CVE-2017-10022 be exploited remotely?
Yes, CVE-2017-10022 can be exploited remotely due to its nature of being an easily exploitable vulnerability with network access.