CVE-2016-5594: Medium severity oracle flexcube universal banking vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA.

Affected Software

5 affected components

Oracle FLEXCUBE Universal Banking=11.3.0

Oracle FLEXCUBE Universal Banking=11.4.0

Oracle FLEXCUBE Universal Banking=12.0.1

Oracle FLEXCUBE Universal Banking=12.0.2

Oracle FLEXCUBE Universal Banking=12.0.3

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5594?

CVE-2016-5594 is categorized as a vulnerability that affects confidentiality in Oracle FLEXCUBE Universal Banking.

How do I fix CVE-2016-5594?

To fix CVE-2016-5594, apply the latest security patches provided by Oracle for affected versions of FLEXCUBE Universal Banking.

What versions of Oracle FLEXCUBE Universal Banking are affected by CVE-2016-5594?

CVE-2016-5594 affects Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, and 12.0.3.

Who can exploit CVE-2016-5594?

CVE-2016-5594 can be exploited by remote authenticated users to affect the confidentiality of the system.

What type of vulnerability is CVE-2016-5594 classified as?

CVE-2016-5594 is classified as an unspecified vulnerability that impacts the Oracle FLEXCUBE Universal Banking component.