CVE-2016-3589

MEDIUM

Oracle FLEXCUBE <12.0.3 - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Applications 12.0.1, 12.0.2, and 12.0.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.

References (4)

[Patch, Vendor Advisory] http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91787

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91847

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036376

Scores

CVSS v3 6.1

EPSS 0.0034

EPSS Percentile 56.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

Status draft

Affected Products (3)

oracle/flexcube_direct_banking

Timeline

Published Jul 21, 2016

Tracked Since Feb 18, 2026