CVE-2018-2706: High severity oracle banking corporate lending vulnerability

Published Jan 18, 2018

Updated

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in takeover of Oracle Banking Corporate Lending. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle Banking Corporate Lending=12.3.0

Oracle Banking Corporate Lending=12.4.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Event History

Jan 18, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-2706?

CVE-2018-2706 is a vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications.

What versions of Oracle Banking Corporate Lending are affected by CVE-2018-2706?

Versions 12.3.0 and 12.4.0 of Oracle Banking Corporate Lending are affected by CVE-2018-2706.

What is the severity of CVE-2018-2706?

CVE-2018-2706 has a severity level of 8.8, which is considered high.

How can CVE-2018-2706 be exploited?

CVE-2018-2706 can be exploited by a low-privileged attacker with network access via HTTP.

Where can I find more information about CVE-2018-2706?

You can find more information about CVE-2018-2706 on the Oracle Security Advisory, SecurityFocus, and SecurityTracker websites.