CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Improper Access Control
Summary: vulnerability in the oracle flexcube universal banking component of oracle financial services applications (subcomponent: infrastructure). supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. easily exploitable vulnerability allows low privileged attacker with network access via http to compromise oracle flexcube universal banking. successful attacks require human interaction from a person other than the attacker. successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial dos) of oracle flexcube universal banking. cvss 3.0 base score 3.5 (availability impacts). cvss vector: (cvss:3.0/av:n/ac:l/pr:l/ui:r/s:u/c:n/i:n/a:l).
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2019-07-23
Last Modified Date: 2019-07-26