CVE-2017-3481
MEDIUMOracle Flexcube Universal Banking - Denial of Service
Title source: ruleDescription
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle FLEXCUBE Universal Banking. CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
Scores
CVSS v3
4.3
EPSS
0.0039
EPSS Percentile
60.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Classification
Status
published
Affected Products (6)
oracle/flexcube_universal_banking
oracle/flexcube_universal_banking
oracle/flexcube_universal_banking
Oracle Corporation/FLEXCUBE Universal Banking
< 11.3.0
Oracle Corporation/FLEXCUBE Universal Banking
< 11.4.0
Oracle Corporation/FLEXCUBE Universal Banking
< 12.0.1
Timeline
Published
Apr 24, 2017
Tracked Since
Feb 18, 2026