CVE-2016-8306: Medium severity Oracle FLEXCUBE Investor Servicing vulnerability
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8306?
CVE-2016-8306 has been classified as a high-severity vulnerability due to its ease of exploitation.
How do I fix CVE-2016-8306?
To fix CVE-2016-8306, upgrade Oracle FLEXCUBE Investor Servicing to a version that is not affected, such as 12.0.3 or later.
Who is affected by CVE-2016-8306?
Organizations using Oracle FLEXCUBE Investor Servicing versions 12.0.1, 12.0.2, 12.0.4, 12.1.0, and 12.3.0 are affected by CVE-2016-8306.
Is CVE-2016-8306 exploitable remotely?
Yes, CVE-2016-8306 is considered easily exploitable by low privileged attackers with network access.
What component is affected by CVE-2016-8306?
CVE-2016-8306 affects the Oracle FLEXCUBE Investor Servicing component within Oracle Financial Services Applications.