Lucene search

OracleCVE-2017-3483

HistoryApr 24, 2017 - 7:59 p.m.

CVE-2017-3483

2017-04-2419:59:02

oracle

web.nvd.nist.gov

cve-2017-3483

oracle

flexcube

enterprise

limits

collateral

management

vulnerability

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

0.001

Percentile

20.4%

JSON

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Easily “exploitable” vulnerability allows high privileged attacker with logon to the infrastructure where Oracle FLEXCUBE Enterprise Limits and Collateral Management executes to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

Affected configurations

Nvd

Vulners

Node

oracleflexcube_enterprise_limits_and_collateral_managementMatch12.0.0

oracleflexcube_enterprise_limits_and_collateral_managementMatch12.1.0

VendorProductVersionCPE
oracleflexcube_enterprise_limits_and_collateral_management12.0.0cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:*:*:*:*:*:*:*
oracleflexcube_enterprise_limits_and_collateral_management12.1.0cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	flexcube_enterprise_limits_and_collateral_management	12.0.0	cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.0.0:::::::*
oracle	flexcube_enterprise_limits_and_collateral_management	12.1.0	cpe:2.3:a:oracle:flexcube_enterprise_limits_and_collateral_management:12.1.0:::::::*

CNA Affected

[
  {
    "product": "FLEXCUBE Enterprise Limits and Collateral Management",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "12.0.0"
      },
      {
        "status": "affected",
        "version": "12.1.0"
      }
    ]
  }
]

References

www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

www.securityfocus.com/bid/97846

www.securitytracker.com/id/1038304

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

0.001

Percentile

20.4%

JSON

Related for CVE-2017-3483