CVE-2016-5619: High severity oracle flexcube universal banking vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different vulnerability than CVE-2016-5620.

Affected Software

7 affected components

Oracle FLEXCUBE Universal Banking=11.3.0

Oracle FLEXCUBE Universal Banking=11.4.0

Oracle FLEXCUBE Universal Banking=12.0.1

Oracle FLEXCUBE Universal Banking=12.0.2

Oracle FLEXCUBE Universal Banking=12.0.3

Oracle FLEXCUBE Universal Banking=12.1.0

Oracle FLEXCUBE Universal Banking=12.2.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5619?

CVE-2016-5619 has a medium severity rating as it allows remote authenticated users to affect the confidentiality and integrity of the system.

How do I fix CVE-2016-5619?

To resolve CVE-2016-5619, it is recommended to apply the latest patches provided by Oracle for affected versions of FLEXCUBE Universal Banking.

Which versions are affected by CVE-2016-5619?

CVE-2016-5619 affects Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1 to 12.0.3, 12.1.0, and 12.2.0.

Can CVE-2016-5619 be exploited remotely?

Yes, CVE-2016-5619 can be exploited by remote authenticated users.

What types of issues does CVE-2016-5619 affect?

CVE-2016-5619 affects the confidentiality and integrity of the system, posing risks to sensitive data.