cnvd - cnvd-2020-04387

cnvd-2020-04387

Vulnerability from cnvd

Title

Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure存在未明漏洞

Description

Oracle Financial Services Applications是美国甲骨文（Oracle）公司的一套金融服务软件。该产品包括核心银行、网上银行和财产管理等。Financial Services Analytical Applications Infrastructure是其中的一个金融服务分析应用基础设施组件。 Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure存在未明漏洞。攻击者可利用该漏洞影响机密性和完整性。

Severity

中

Patch Name

Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure存在未明漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.oracle.com/security-alerts/cpujan2020.html

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-2688

Impacted products

Name
Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure >=8.0.4，<=8.0.8

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-2688",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-2688"
    }
  },
  "description": "Oracle Financial Services Applications\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u91d1\u878d\u670d\u52a1\u8f6f\u4ef6\u3002\u8be5\u4ea7\u54c1\u5305\u62ec\u6838\u5fc3\u94f6\u884c\u3001\u7f51\u4e0a\u94f6\u884c\u548c\u8d22\u4ea7\u7ba1\u7406\u7b49\u3002Financial Services Analytical Applications Infrastructure\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u91d1\u878d\u670d\u52a1\u5206\u6790\u5e94\u7528\u57fa\u7840\u8bbe\u65bd\u7ec4\u4ef6\u3002\n\nOracle Financial Services Applications Financial Services Analytical Applications Infrastructure\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5f71\u54cd\u673a\u5bc6\u6027\u548c\u5b8c\u6574\u6027\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.oracle.com/security-alerts/cpujan2020.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-04387",
  "openTime": "2020-02-09",
  "patchDescription": "Oracle Financial Services Applications\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u91d1\u878d\u670d\u52a1\u8f6f\u4ef6\u3002\u8be5\u4ea7\u54c1\u5305\u62ec\u6838\u5fc3\u94f6\u884c\u3001\u7f51\u4e0a\u94f6\u884c\u548c\u8d22\u4ea7\u7ba1\u7406\u7b49\u3002Financial Services Analytical Applications Infrastructure\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u91d1\u878d\u670d\u52a1\u5206\u6790\u5e94\u7528\u57fa\u7840\u8bbe\u65bd\u7ec4\u4ef6\u3002\r\n\r\nOracle Financial Services Applications Financial Services Analytical Applications Infrastructure\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5f71\u54cd\u673a\u5bc6\u6027\u548c\u5b8c\u6574\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure \u003e=8.0.4\uff0c\u003c=8.0.8"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-2688",
  "serverity": "\u4e2d",
  "submitTime": "2020-01-15",
  "title": "Oracle Financial Services Applications Financial Services Analytical Applications Infrastructure\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2020-2688 (GCVE-0-2020-2688)

Vulnerability from cvelistv5

Published

2020-01-15 16:34

Modified

2024-09-30 15:54

Severity ?

7.1 (High) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data.

Summary

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).

References

URL

Tags

https://www.oracle.com/security-alerts/cpujan2020.html

x_refsource_MISC