CVE-2012-3228: Medium severity oracle financial services vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect integrity and availability, related to BASE.

Affected Software

8 affected components

Oracle Financial Services Software=5.0.2

Oracle Financial Services Software=5.0.5

Oracle Financial Services Software=5.1.0

Oracle Financial Services Software=5.2.0

Oracle Financial Services Software=5.3.0

Oracle Financial Services Software=5.3.4

Oracle Financial Services Software=6.0.1

Oracle Financial Services Software=6.2.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3228?

The severity of CVE-2012-3228 is categorized as medium, affecting the integrity and availability of the system.

What versions of Oracle Financial Services Software are affected by CVE-2012-3228?

CVE-2012-3228 affects Oracle Financial Services Software versions 5.0.2 through 5.3.4, 6.0.1, and 6.2.0.

How do I fix CVE-2012-3228?

To fix CVE-2012-3228, update your Oracle Financial Services Software to a version that is not vulnerable.

Can CVE-2012-3228 be exploited remotely?

Yes, CVE-2012-3228 can be exploited by remote authenticated users to impact system integrity and availability.

What is the primary component affected by CVE-2012-3228?

The primary component affected by CVE-2012-3228 is the Oracle FLEXCUBE Direct Banking.