CVEvulnerability

CVE-2016-5621

4.3 MEDIUM Published 2016-10-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-10-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-200, CWE-284

Description

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5603.

Affected configurations

• oracle flexcube universal banking 11.3.0 • oracle flexcube universal banking 11.4.0 • oracle flexcube universal banking 12.0.1 • oracle flexcube universal banking 12.0.2 • oracle flexcube universal banking 12.0.3 • oracle flexcube universal banking 12.1.0 • oracle flexcube universal banking 12.2.0

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-284 Improper Access Control weakness

References