CVEvulnerability
CVE-2016-5620
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-284
Description
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different vulnerability than CVE-2016-5619.
Affected configurations
• oracle flexcube universal banking 11.3.0
• oracle flexcube universal banking 11.4.0
• oracle flexcube universal banking 12.0.1
• oracle flexcube universal banking 12.0.2
• oracle flexcube universal banking 12.0.3
• oracle flexcube universal banking 12.1.0
• oracle flexcube universal banking 12.2.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93649 www.securityfocus.com
- http://www.securitytracker.com/id/1037049 www.securitytracker.com
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93649 www.securityfocus.com
- http://www.securitytracker.com/id/1037049 www.securitytracker.com