CVE:CVE-2018-2749
CNNVD:CNNVD-201804-1269
Oracle Financial Services Applications是美国甲骨文（Oracle）公司的一套集核心银行、网上银行和财产管理于一身的金融服务软件。Banking Corporate Lending是其中的一个银行贷款管理组件。
Oracle Financial Services Applications中的Banking Corporate Lending组件的Core module子组件存在安全漏洞。攻击者可利用该漏洞未授权读取、更新、插入或删除数据，影响数据的保密性和完整性。以下版本受到影响：Oracle Banking Corporate Lending 12.3.0版本，12.4.0版本，12.5.0版本，14.0.0版本。
solution:Upgrade oracle banking_corporate_lending to a higher version than 12.3.0,12.4.0,12.5.0,14.0.0,and avoid the version 12.3.0,12.4.0,12.5.0,14.0.0; Upgrade oracle banking_payments to a higher version than 12.3.0,12.4.0,12.5.0,14.0.0,and avoid the version 12.3.0,12.4.0,12.5.0,14.0.0; Upgrade oracle flexcube_enterprise_limits_and_collateral_management to a higher version than 12.3.0,14.0.0,and avoid the version 12.3.0,14.0.0; Upgrade oracle flexcube_investor_servicing to a higher version than 12.0.4,12.1.0,12.3.0,12.4.0,and avoid the version 12.0.4,12.1.0,12.3.0,12.4.0; Upgrade oracle flexcube_universal_banking to a higher version than 11.3.0,11.4.0,12.0.1,12.0.2,12.0.3,12.1.0,12.2.0,12.3.0,12.4.0,14.0.0,and avoid the version 11.3.0,11.4.0,12.0.1,12.0.2,12.0.3,12.1.0,12.2.0,12.3.0,12.4.0,14.0.0