CVE-2018-3047: Medium severity oracle flexcube enterprise limits and collateral management vulnerability
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3047?
CVE-2018-3047 is classified as a difficult to exploit vulnerability affecting specific versions of Oracle FLEXCUBE.
Which versions of Oracle FLEXCUBE are affected by CVE-2018-3047?
CVE-2018-3047 affects Oracle FLEXCUBE versions 12.3.0, 14.0.0, and 14.1.0.
What types of attacks exploit CVE-2018-3047?
CVE-2018-3047 can be exploited by low privileged attackers under certain conditions.
How do I mitigate CVE-2018-3047?
To mitigate CVE-2018-3047, ensure that you upgrade to the latest patched version of Oracle FLEXCUBE.
Is CVE-2018-3047 a widely exploitable vulnerability?
CVE-2018-3047 is considered difficult to exploit, making it less likely for widespread attacks.