Vulnerabilities > Oracle > Flexcube Private Banking > 2.0.1

DATE CVE VULNERABILITY TITLE RISK
2017-01-27 CVE-2016-8298 Improper Access Control vulnerability in Oracle Flexcube Private Banking 12.0.1/2.0.1/2.2.0
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).
network
low complexity
oracle CWE-284
5.5
2017-01-27 CVE-2016-8282 Improper Access Control vulnerability in Oracle Flexcube Private Banking 12.0.1/2.0.1/2.2.0
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).
network
oracle CWE-284
5.8
2017-01-27 CVE-2016-5623 7PK - Security Features vulnerability in Oracle Flexcube Private Banking 12.0.1/2.0.1/2.2.0
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).
network
low complexity
oracle CWE-254
5.5
2017-01-27 CVE-2016-5614 Information Exposure vulnerability in Oracle Flexcube Private Banking 12.0.1/2.0.1/2.2.0
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).
network
low complexity
oracle CWE-200
4.0
2013-09-30 CVE-2013-4316 Improper Access Control vulnerability in multiple products
Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.
network
low complexity
apache oracle CWE-284
critical
10.0