CVE-2012-3224: Low severity oracle financial services vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.1.0, 5.2.0, and 5.3.0 through 5.3.4 allows remote authenticated users to affect confidentiality, related to BASE.

Affected Software

4 affected components

Oracle Financial Services Software=5.1.0

Oracle Financial Services Software=5.2.0

Oracle Financial Services Software=5.3.0

Oracle Financial Services Software=5.3.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3224?

CVE-2012-3224 has a moderate severity rating as it allows remote authenticated users to potentially affect confidentiality.

How do I fix CVE-2012-3224?

To fix CVE-2012-3224, apply the latest security patches provided by Oracle for affected versions of Oracle Financial Services Software.

Which versions of Oracle Financial Services Software are affected by CVE-2012-3224?

CVE-2012-3224 affects Oracle Financial Services Software versions 5.1.0, 5.2.0, 5.3.0, and 5.3.4.

Is CVE-2012-3224 exploitable without authentication?

No, CVE-2012-3224 is only exploitable by remote authenticated users.

What impact does CVE-2012-3224 have on security?

CVE-2012-3224 could lead to unauthorized access to sensitive information, impacting confidentiality.