CVE-2017-3492
First published: Mon Apr 24 2017(Updated: )
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle FLEXCUBE Enterprise Limits and Collateral Management | =12.0.0 | |
| Oracle FLEXCUBE Enterprise Limits and Collateral Management | =12.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3492?
CVE-2017-3492 is classified as an easily exploitable vulnerability that affects Oracle FLEXCUBE Enterprise Limits and Collateral Management.
How do I fix CVE-2017-3492?
To fix CVE-2017-3492, you should apply the latest security patches provided by Oracle for affected versions 12.0.0 and 12.1.0.
Who is affected by CVE-2017-3492?
Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 and 12.1.0 are affected by CVE-2017-3492.
What type of attacks can CVE-2017-3492 enable?
CVE-2017-3492 allows low privileged attackers with network access to exploit the vulnerability.
When was CVE-2017-3492 disclosed?
CVE-2017-3492 was disclosed in April 2017 as part of Oracle's Critical Patch Update.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/remedy
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- vendor/oracle
- canonical/oracle flexcube enterprise limits and collateral management
- version/oracle flexcube enterprise limits and collateral management/12.0.0
- version/oracle flexcube enterprise limits and collateral management/12.1.0