CVE-2012-3223: Low severity oracle financial services vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, and 6.0.1 allows remote authenticated users to affect confidentiality, related to BASE.

Affected Software

7 affected components

Oracle Financial Services Software=5.0.2

Oracle Financial Services Software=5.0.5

Oracle Financial Services Software=5.1.0

Oracle Financial Services Software=5.2.0

Oracle Financial Services Software=5.3.0

Oracle Financial Services Software=5.3.4

Oracle Financial Services Software=6.0.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3223?

CVE-2012-3223 is classified as a vulnerability that can affect confidentiality of the system.

How do I fix CVE-2012-3223?

To fix CVE-2012-3223, update the Oracle FLEXCUBE Direct Banking component to a patched version that addresses the vulnerability.

Who is affected by CVE-2012-3223?

CVE-2012-3223 affects users of Oracle Financial Services Software versions 5.0.2 through 5.3.4 and 6.0.1.

What types of attacks could exploit CVE-2012-3223?

CVE-2012-3223 could potentially be exploited by remote authenticated users to gain unauthorized access to sensitive data.

Is there a workaround for CVE-2012-3223?

There are no specific workarounds documented for CVE-2012-3223; the recommended action is to apply the latest security updates.