Information disclosure in Oracle Financial Services Software and Oracle FLEXCUBE Enterprise Limits and Collateral Management - CVE-2016-5569
Published: October 24, 2016 / Updated: January 5, 2017
Vulnerability identifier: #VU1053
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2016-5569
CWE-ID: CWE-399
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Oracle
Affected software:
Oracle Financial Services Software
Oracle FLEXCUBE Enterprise Limits and Collateral Management
Oracle Financial Services Software
Oracle FLEXCUBE Enterprise Limits and Collateral Management
Detailed vulnerability description
The vulnerability allows a remote authenticated user to access data on the target system.
The weakness is caused by a flaw in the Oracle FLEXCUBE Enterprise Limits and Collateral Management Limits and Collateral component and lets attacker partially obtain and partially modify arbitrary files.
Successful exploitation of the vulnerability results in disclosure and partial modification of information on the vulnerable system.
The weakness is caused by a flaw in the Oracle FLEXCUBE Enterprise Limits and Collateral Management Limits and Collateral component and lets attacker partially obtain and partially modify arbitrary files.
Successful exploitation of the vulnerability results in disclosure and partial modification of information on the vulnerable system.