PT-2012-4581 · Oracle · Oracle Flexcube Universal Banking+1

Published 2012-10-17 · Updated 2013-10-11 · CVE-2012-3226

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software versions 10.0.0 through 10.5.0 Oracle Financial Services Software versions 11.0.0 through 11.4.0 Oracle Financial Services Software version 12.0.0

Description The issue affects confidentiality and integrity, and is related to the BASE component in the Oracle FLEXCUBE Universal Banking component. Remote authenticated users can exploit this issue.

Recommendations For versions 10.0.0 through 10.5.0, update to a version that includes the fix for this issue. For versions 11.0.0 through 11.4.0, update to a version that includes the fix for this issue. For version 12.0.0, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2012-3226

Affected Products

Oracle Flexcube Universal Banking

Oracle Financial Services

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-3226 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2012-1515893.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• http://secunia.com/advisories/51005 · Note