CVE-2017-3487: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications...

Security readout for executives and security teams

CVE-2017-3487 affects Oracle FLEXCUBE Investor Servicing, a financial services application. A low-privileged user with HTTP network access could, in difficult conditions, modify some accessible data. The main business concern is data integrity, not data theft or service outage, based on the provided CVSS vector. Exposure is limited to organizations running affected Oracle FLEXCUBE Investor Servicing versions with HTTP access available to low-privileged users. Internet exposure is not stated in the sources. The most relevant environments are financial institutions using the Unit Trust component. Address during the next security maintenance cycle, faster if the affected system supports sensitive investor workflows or is broadly reachable. The issue is not documented as actively exploited, but unauthorized financial data modification can create audit, trust, and operational risk. Mitigation focus: Identify affected FLEXCUBE Investor Servicing versions in production and test environments.; Review Oracle's April 2017 CPU guidance for applicable fixes or upgrade paths.; Restrict HTTP access to trusted networks and authenticated users only..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.