CVE-2016-8312
First published: Fri Jan 27 2017(Updated: )
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Private Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Private Banking accessible data as well as unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 8.2 (Confidentiality and Integrity impacts).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle FLEXCUBE Private Banking | =2.0.1 | |
| Oracle FLEXCUBE Private Banking | =2.2.0 | |
| Oracle FLEXCUBE Private Banking | =12.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-8312?
CVE-2016-8312 is considered an easily exploitable vulnerability that could allow unauthorized access to the Oracle FLEXCUBE Private Banking component.
How do I fix CVE-2016-8312?
To remediate CVE-2016-8312, upgrade to a patched version of Oracle FLEXCUBE Private Banking that addresses this vulnerability.
What versions of Oracle FLEXCUBE Private Banking are affected by CVE-2016-8312?
The affected versions for CVE-2016-8312 include 2.0.1, 2.2.0, and 12.0.1 of Oracle FLEXCUBE Private Banking.
Can CVE-2016-8312 be exploited remotely?
Yes, CVE-2016-8312 is remotely exploitable by an unauthenticated attacker with network access.
What component of Oracle Financial Services Applications is affected by CVE-2016-8312?
CVE-2016-8312 impacts the Product / Instrument Search subcomponent of the Oracle FLEXCUBE Private Banking module.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle flexcube private banking
- version/oracle flexcube private banking/2.0.1
- version/oracle flexcube private banking/2.2.0
- version/oracle flexcube private banking/12.0.1