Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2016-5502

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oracle FLEXCUBE Universal Banking是美国甲骨文（Oracle）公司的一套实时的、在线覆盖零售、团体、投资银行业务的综合性解决方案。该方案支持多货币、多语言和多实体操作等。 Oracle Financial Services Applications的Oracle FLEXCUBE Universal Banking组件中的INFRA子组件中存在远程安全漏洞。攻击者可利用该漏洞读取、更新、插入或删除数据，影响数据的保密性和完整性。以下版本受到影响：Oracle Financi

AI Predicted 8.6 Difficulty: Moderate EPSS 1.18% · P65
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2016-5502

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Oracle Financial Services Applications FLEXCUBE Universal Banking组件远程安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Oracle FLEXCUBE Universal Banking是美国甲骨文（Oracle）公司的一套实时的、在线覆盖零售、团体、投资银行业务的综合性解决方案。该方案支持多货币、多语言和多实体操作等。 Oracle Financial Services Applications的Oracle FLEXCUBE Universal Banking组件中的INFRA子组件中存在远程安全漏洞。攻击者可利用该漏洞读取、更新、插入或删除数据，影响数据的保密性和完整性。以下版本受到影响：Oracle Financi
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2016-5502

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-5502

请登录查看更多情报信息。

Vendor Advisories for CVE-2016-5502 (3)

Same Patch Batch · n/a · 2016-10-25 · 162 CVEs total

CVE-2016-5597 Oracle Java SE和Oracle Java SE Embedded 信息泄露漏洞
CVE-2016-5586 Oracle E-Business Suite Oracle Email Center组件安全漏洞
CVE-2016-5587 Oracle E-Business Suite Oracle Customer Interaction History组件远程安全漏洞
CVE-2016-5588 Oracle Fusion Middleware Oracle Outside In Technology组件远程安全漏洞
CVE-2016-5589 Oracle E-Business Suite Oracle CRM Technical Foundation组件远程安全漏洞
CVE-2016-5591 Oracle E-Business Suite Oracle Customer Interaction History组件远程安全漏洞
CVE-2016-5592 Oracle E-Business Suite Oracle Customer Interaction History组件安全漏洞
CVE-2016-5593 Oracle E-Business Suite Oracle Customer Interaction History组件远程安全漏洞
CVE-2016-5594 Oracle Financial Services Applications FLEXCUBE Universal Banking 远程安全漏洞
CVE-2016-5595 Oracle E-Business Suite Oracle Customer Interaction History组件安全漏洞
CVE-2016-5596 Oracle E-Business Suite Oracle CRM Technical Foundation组件远程安全漏洞
CVE-2016-5602 Oracle Fusion Middleware Oracle Data Integrator组件远程安全漏洞
CVE-2016-5606 Oracle Sun Systems Products Suite Solaris组件本地安全漏洞
CVE-2016-5605 Oracle Virtualization Oracle VM VirtualBox组件远程安全漏洞
CVE-2016-5604 Oracle Enterprise Manager Grid Control Oracle Enterprise Manager Base Platform组件本地安全漏洞
CVE-2016-5603 Oracle Financial Services Applications Oracle FLEXCUBE Universal Banking组件远程安全漏洞
CVE-2016-5600 Oracle PeopleSoft Products PeopleSoft Enterprise SCM Services Procurement组件远程安全漏洞
CVE-2016-5598 Oracle MySQL Connector组件远程安全漏洞
CVE-2016-5599 Oracle Supply Chain Products Suite Oracle Advanced Supply Chain Planning组件远程安全漏洞
CVE-2016-5585 Oracle E-Business Suite Oracle Interaction Center Intelligence组件远程安全漏洞

Showing top 20 of 162 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-5502

No comments yet

Leave a comment