CVE-2016-5607: High severity oracle flexcube universal banking vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to INFRA.

Affected Software

7 affected components

Oracle FLEXCUBE Universal Banking=11.3.0

Oracle FLEXCUBE Universal Banking=11.4.0

Oracle FLEXCUBE Universal Banking=12.0.1

Oracle FLEXCUBE Universal Banking=12.0.2

Oracle FLEXCUBE Universal Banking=12.0.3

Oracle FLEXCUBE Universal Banking=12.1.0

Oracle FLEXCUBE Universal Banking=12.2.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5607?

CVE-2016-5607 is considered to have a high severity due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-5607?

To fix CVE-2016-5607, you should apply the latest security patches provided by Oracle for the affected versions of FLEXCUBE Universal Banking.

Who is affected by CVE-2016-5607?

CVE-2016-5607 affects remote authenticated users of Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0.

What components are impacted by CVE-2016-5607?

CVE-2016-5607 impacts the Oracle FLEXCUBE Universal Banking component within Oracle Financial Services Applications.

What types of attacks can exploit CVE-2016-5607?

CVE-2016-5607 can potentially be exploited through various vectors related to INFRA, affecting the system's overall security posture.