CVE-2018-3046: Medium severity oracle banking corporate lending vulnerability
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3046?
CVE-2018-3046 has been classified as a difficult to exploit vulnerability.
How do I fix CVE-2018-3046?
To fix CVE-2018-3046, you should apply the appropriate patches provided by Oracle for the affected versions.
Which versions of Oracle Banking Corporate Lending are affected by CVE-2018-3046?
The affected versions include 12.3.0, 12.4.0, 12.5.0, 14.0.0, and 14.1.0.
What types of attacks can exploit CVE-2018-3046?
CVE-2018-3046 can be exploited by a low privileged attacker with network access.
Is CVE-2018-3046 related to Oracle Financial Services Applications?
Yes, CVE-2018-3046 is a vulnerability within the Oracle Banking Corporate Lending component of Oracle Financial Services Applications.