NVD

Id
84508  
Name
CVE-2017-3496  
Description
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.0 and 12.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Enterprise Limits and Collateral Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Enterprise Limits and Collateral Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-04-24  
Modified Date
2017-07-10  
Seq
2017-3496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
413797 84508 CVE-2017-5337 openSUSE-SU-2017:0386  View
413798 84508 CVE-2017-5337 [oss-security] 20170110 CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
413799 84508 CVE-2017-5337 [oss-security] 20170110 Re: CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
413800 84508 CVE-2017-5337 95372  View
413801 84508 CVE-2017-5337 1037576  View
413802 84508 CVE-2017-5337 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=338  View
413803 84508 CVE-2017-5337 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346  View
413804 84508 CVE-2017-5337 https://gitlab.com/gnutls/gnutls/commit/94fcf1645ea17223237aaf8d19132e004afddc1a  View
413805 84508 CVE-2017-5337 https://gnutls.org/security.html#GNUTLS-SA-2017-2  View
413806 84508 CVE-2017-5337 GLSA-201702-04  View
413807 84508 CVE-2017-5337 openSUSE-SU-2017:0386  View
413808 84508 CVE-2017-5337 [oss-security] 20170110 CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
413809 84508 CVE-2017-5337 [oss-security] 20170110 Re: CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
413810 84508 CVE-2017-5337 95372  View
413811 84508 CVE-2017-5337 1037576  View
413812 84508 CVE-2017-5337 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=338  View
413813 84508 CVE-2017-5337 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346  View
413814 84508 CVE-2017-5337 https://gitlab.com/gnutls/gnutls/commit/94fcf1645ea17223237aaf8d19132e004afddc1a  View
413815 84508 CVE-2017-5337 https://gnutls.org/security.html#GNUTLS-SA-2017-2  View
413816 84508 CVE-2017-5337 GLSA-201702-04  View
413817 84508 CVE-2017-5337 openSUSE-SU-2017:0386  View
413818 84508 CVE-2017-5337 [oss-security] 20170110 CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
413819 84508 CVE-2017-5337 [oss-security] 20170110 Re: CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
413820 84508 CVE-2017-5337 95372  View
413821 84508 CVE-2017-5337 1037576  View
413822 84508 CVE-2017-5337 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=338  View
413823 84508 CVE-2017-5337 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346  View
413824 84508 CVE-2017-5337 https://gitlab.com/gnutls/gnutls/commit/94fcf1645ea17223237aaf8d19132e004afddc1a  View
413825 84508 CVE-2017-5337 https://gnutls.org/security.html#GNUTLS-SA-2017-2  View
413826 84508 CVE-2017-5337 GLSA-201702-04  View
416971 84508 CVE-2017-0581 97335  View
416972 84508 CVE-2017-0581 https://source.android.com/security/bulletin/2017-04-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67210 JVNDB-2017-003522 Oracle Financial Services Applications の Oracle FLEXCUBE Enterprise Limits and Collateral Management における Infrastructure に関する脆弱性 Oracle Financial Services Applications の Oracle FLEXCUBE Enterprise Limits and Collateral Management には、Infrastructure に関する処理に不備があるため、機密性、および完全性に影響のある脆弱性が存在します。 CVE-2017-3496 0 CVE-2017-3496 84508 5.8 6.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003522.html 2017-04-18 2017-05-30 View