Information disclosure in Oracle Financial Services Software and Oracle FLEXCUBE Universal Banking - CVE-2016-5620
Published: October 24, 2016 / Updated: January 5, 2017
Vulnerability identifier: #VU1055
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2016-5620
CWE-ID: CWE-399
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Oracle
Affected software:
Oracle Financial Services Software
Oracle FLEXCUBE Universal Banking
Oracle Financial Services Software
Oracle FLEXCUBE Universal Banking
Detailed vulnerability description
The vulnerability allows a remote authenticated user to access data on the target system.
The weakness is caused by a flaw in the Oracle FLEXCUBE Universal Banking INFRA componentt and lets attacker partially obtain and partially modify arbitrary files.
Successful exploitation of the vulnerability results in disclosure and partial modification of information on the vulnerable system.
The weakness is caused by a flaw in the Oracle FLEXCUBE Universal Banking INFRA componentt and lets attacker partially obtain and partially modify arbitrary files.
Successful exploitation of the vulnerability results in disclosure and partial modification of information on the vulnerable system.