CVE-2018-3033: Medium severity oracle flexcube investor servicing vulnerability
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3033?
CVE-2018-3033 is considered a difficult to exploit vulnerability with low impact, affecting specific versions of Oracle FLEXCUBE Investor Servicing.
How do I fix CVE-2018-3033?
To fix CVE-2018-3033, it is recommended to apply the latest patches from Oracle for the affected versions.
Which versions of Oracle FLEXCUBE Investor Servicing are affected by CVE-2018-3033?
CVE-2018-3033 affects Oracle FLEXCUBE Investor Servicing versions 12.0.4, 12.1.0, 12.3.0, and 12.4.0.
What components are impacted by CVE-2018-3033?
CVE-2018-3033 impacts the Oracle FLEXCUBE Investor Servicing component within Oracle Financial Services Applications.
Who can exploit CVE-2018-3033?
CVE-2018-3033 can potentially be exploited by a low privileged attacker with network access to the affected systems.