Lucene search

[email protected]CVE-2012-3141

HistoryOct 16, 2012 - 11:55 p.m.

CVE-2012-3141

2012-10-1623:55:03

[email protected]

web.nvd.nist.gov

cve-2012-3141

oracle

flexcube universal banking

vulnerability

oracle financial services software

nvd

integrity

remote authenticated users

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.1%

JSON

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect integrity, related to BASE, a different vulnerability than CVE-2012-3227.

Affected configurations

NVD

Node

oraclefinancial_services_softwareMatch10.0.0

oraclefinancial_services_softwareMatch10.0.2

oraclefinancial_services_softwareMatch10.1.0

oraclefinancial_services_softwareMatch10.2.0

oraclefinancial_services_softwareMatch10.2.2

oraclefinancial_services_softwareMatch10.3.0

oraclefinancial_services_softwareMatch10.5.0

oraclefinancial_services_softwareMatch11.0.0

oraclefinancial_services_softwareMatch11.2.0

CPENameOperatorVersion
oracle:financial_services_softwareoracle financial services softwareeq10.0.0
oracle:financial_services_softwareoracle financial services softwareeq10.0.2
oracle:financial_services_softwareoracle financial services softwareeq10.1.0
oracle:financial_services_softwareoracle financial services softwareeq10.2.0
oracle:financial_services_softwareoracle financial services softwareeq10.2.2
oracle:financial_services_softwareoracle financial services softwareeq10.3.0
oracle:financial_services_softwareoracle financial services softwareeq10.5.0
oracle:financial_services_softwareoracle financial services softwareeq11.0.0
oracle:financial_services_softwareoracle financial services softwareeq11.2.0

CPE	Name	Operator	Version
oracle:financial_services_software	oracle financial services software	eq	10.0.0
oracle:financial_services_software	oracle financial services software	eq	10.0.2
oracle:financial_services_software	oracle financial services software	eq	10.1.0
oracle:financial_services_software	oracle financial services software	eq	10.2.0
oracle:financial_services_software	oracle financial services software	eq	10.2.2
oracle:financial_services_software	oracle financial services software	eq	10.3.0
oracle:financial_services_software	oracle financial services software	eq	10.5.0
oracle:financial_services_software	oracle financial services software	eq	11.0.0
oracle:financial_services_software	oracle financial services software	eq	11.2.0

References

secunia.com/advisories/51005

www.mandriva.com/security/advisories?name=MDVSA-2013:150

www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

exchange.xforce.ibmcloud.com/vulnerabilities/79351

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.1%

JSON

Related for CVE-2012-3141

cvelist2 prion2 cve1 nvd2 oracle1