CVE-2018-3021: Medium severity oracle banking payments vulnerability

Published Jul 18, 2018

Updated

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

5 affected components

ORACLE Banking Payments=12.2.0

ORACLE Banking Payments=12.3.0

ORACLE Banking Payments=12.4.0

ORACLE Banking Payments=12.5.0

ORACLE Banking Payments=14.1.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Event History

Jul 18, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-3021?

The severity of CVE-2018-3021 is medium with a severity value of 5.3.

Which versions of Oracle Banking Payments are affected by CVE-2018-3021?

The affected versions of Oracle Banking Payments are 12.2.0, 12.3.0, 12.4.0, 12.5.0, and 14.1.0.

Is CVE-2018-3021 easily exploitable?

Yes, CVE-2018-3021 is an easily exploitable vulnerability.

How can an attacker exploit CVE-2018-3021?

An unauthenticated attacker with network access can exploit CVE-2018-3021.

Where can I find more information about CVE-2018-3021?

More information about CVE-2018-3021 can be found on the Oracle website and security advisory links provided.