CVE-2012-5064: Low severity Oracle Financial Services Software vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality, related to BASE.

Affected Software

9 affected components

Oracle Financial Services Software=10.0.0

Oracle Financial Services Software=10.0.2

Oracle Financial Services Software=10.1.0

Oracle Financial Services Software=10.2.0

Oracle Financial Services Software=10.2.2

Oracle Financial Services Software=10.3.0

Oracle Financial Services Software=10.5.0

Oracle Financial Services Software=11.0.0

Oracle Financial Services Software=11.2.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-5064?

CVE-2012-5064 is classified as a confidentiality vulnerability affecting Oracle FLEXCUBE Universal Banking.

Who is affected by CVE-2012-5064?

CVE-2012-5064 affects remote authenticated users of Oracle FLEXCUBE Universal Banking versions 10.0.0 through 11.2.0.

How can I fix CVE-2012-5064?

To fix CVE-2012-5064, update your Oracle FLEXCUBE Universal Banking software to the latest version provided by Oracle.

What is the impact of CVE-2012-5064?

The impact of CVE-2012-5064 may include unauthorized access to sensitive information, affecting confidentiality.

When was CVE-2012-5064 disclosed?

CVE-2012-5064 was disclosed in October 2012 as part of Oracle's Critical Patch Update.