{"id":"CVE-2016-5594","aliases":["EUVD-2016-6538","GHSA-vw9m-pxv5-gcvw"],"status":"published","title":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial...","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA.","severity":{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01361,"percentile":0.71928,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2016-10-25T14:00:00Z","modified":"2026-06-17T00:49:43Z","products":[{"vendor":"oracle","product":"flexcube_universal_banking"}],"references":[{"url":"http://www.securityfocus.com/bid/93616","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securitytracker.com/id/1037049","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5594"},{"url":"https://github.com/advisories/GHSA-vw9m-pxv5-gcvw"}],"sources":{"cve":[{"id":"CVE-2016-5594","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA.","status":"published","published":"2016-10-25T14:00:00Z","modified":"2024-10-10T18:21:26.217Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6538","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA.","status":"published","published":"2016-10-25T14:00:00Z","modified":"2024-10-10T18:21:26Z","updated_at":"2026-11-03T00:27:40.508744Z"}],"ghsa":[{"id":"GHSA-vw9m-pxv5-gcvw","title":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial...","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA.","status":"published","published":"2022-05-17T02:23:09Z","modified":"2023-01-27T05:04:32Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:42:28.849957Z"}],"nvd":[{"id":"CVE-2016-5594","description":"Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to INFRA.","status":"published","published":"2016-10-25T14:31:04.89Z","modified":"2026-06-17T00:49:43.02Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:32.086916Z"}]}}