CVE Vulnerability

CVE-2021-2141

Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.1 Base Score 2.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N).

2.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

2 /10

CVSS v3.0 : LOW

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.oracle.com/security-alerts/cpuapr2021.html Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*
Information

Published : 2021-04-22 10:15

Updated : 2021-04-23 09:25

NVD link : CVE-2021-2141

Mitre link : CVE-2021-2141

Products Affected
No products.
CWE
NVD-CWE-noinfo