CVE-2017-3492: Medium severity Oracle FLEXCUBE Enterprise Limits and Collateral Management vulnerability
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3492?
CVE-2017-3492 is classified as an easily exploitable vulnerability that affects Oracle FLEXCUBE Enterprise Limits and Collateral Management.
How do I fix CVE-2017-3492?
To fix CVE-2017-3492, you should apply the latest security patches provided by Oracle for affected versions 12.0.0 and 12.1.0.
Who is affected by CVE-2017-3492?
Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 and 12.1.0 are affected by CVE-2017-3492.
What type of attacks can CVE-2017-3492 enable?
CVE-2017-3492 allows low privileged attackers with network access to exploit the vulnerability.
When was CVE-2017-3492 disclosed?
CVE-2017-3492 was disclosed in April 2017 as part of Oracle's Critical Patch Update.