CVE-2016-5603: Infoleak

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5621.

Affected Software

7 affected components

Oracle FLEXCUBE Universal Banking=11.3.0

Oracle FLEXCUBE Universal Banking=11.4.0

Oracle FLEXCUBE Universal Banking=12.0.1

Oracle FLEXCUBE Universal Banking=12.0.2

Oracle FLEXCUBE Universal Banking=12.0.3

Oracle FLEXCUBE Universal Banking=12.1.0

Oracle FLEXCUBE Universal Banking=12.2.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5603?

CVE-2016-5603 has a severity rating that indicates it can allow remote authenticated users to affect confidentiality.

How do I fix CVE-2016-5603?

To fix CVE-2016-5603, it is recommended to apply the latest security patches provided by Oracle for affected versions of FLEXCUBE Universal Banking.

Which versions are affected by CVE-2016-5603?

CVE-2016-5603 affects Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, and 12.2.0.

Who can exploit CVE-2016-5603?

CVE-2016-5603 can be exploited by remote authenticated users.

What type of vulnerability is CVE-2016-5603?

CVE-2016-5603 is classified as an unspecified vulnerability related to confidentiality within the Oracle FLEXCUBE Universal Banking component.