CVE-2019-2549 is a vulnerability in the Logoff Page subcomponent of Oracle FLEXCUBE Direct Banking, specifically affecting version 12.0.2. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require user interaction and can lead to unauthorized read, update, insert, or delete access to a subset of Oracle FLEXCUBE Direct Banking's data. The vulnerability has a CVSS 3.0 Base Score of 6.1 (Medium), indicating moderate confidentiality and integrity impacts. Its attack vector is network-based with low attack complexity, but requires user interaction. While the vulnerability is in Oracle FLEXCUBE Direct Banking, successful attacks may significantly impact additional products. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.0.2CPE matchmatch criteria | cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.