CVE-2012-1704

2012-05-0322:55:02

[email protected]

web.nvd.nist.gov

cve-2012-1704

oracle

flexcube

direct banking

financial services

software

nvd

confidentiality

vulnerability

remote users

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

5.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.0%

JSON

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different vulnerability than CVE-2012-1707.

Affected configurations

NVD

Node

oraclefinancial_services_softwareMatch5.0.2

oraclefinancial_services_softwareMatch5.3.0

oraclefinancial_services_softwareMatch5.3.4

oraclefinancial_services_softwareMatch6.0.1

oraclefinancial_services_softwareMatch6.2.0

CPENameOperatorVersion
oracle:financial_services_softwareoracle financial services softwareeq5.0.2
oracle:financial_services_softwareoracle financial services softwareeq5.3.0
oracle:financial_services_softwareoracle financial services softwareeq5.3.4
oracle:financial_services_softwareoracle financial services softwareeq6.0.1
oracle:financial_services_softwareoracle financial services softwareeq6.2.0

CPE	Name	Operator	Version
oracle:financial_services_software	oracle financial services software	eq	5.0.2
oracle:financial_services_software	oracle financial services software	eq	5.3.0
oracle:financial_services_software	oracle financial services software	eq	5.3.4
oracle:financial_services_software	oracle financial services software	eq	6.0.1
oracle:financial_services_software	oracle financial services software	eq	6.2.0