« Volver al listado

CVE-2012-0545

Estado: ModificadaBaja (3.6)—

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core, a different vulnerability than CVE-2012-0546 and CVE-2012-0567.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Oracle — Financial Services Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0545",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-05-03T18:55:01.403",
  "references": [
    {
      "url": "http://secunia.com/advisories/48831",
      "tags": [
        "Permissions Required"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/53122",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1026953",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://secunia.com/advisories/48831",
      "tags": [
        "Permissions Required"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/53122",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1026953",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core, a different vulnerability than CVE-2012-0546 and CVE-2012-0567."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el componente Oracle FLEXCUBE Universal Banking en Oracle Financial Services Software 10.0.0 hasta la versión 10.5.0 y 11.0.0 hasta la versión 11.2.0 permite a usuarios remotos autenticados afectar la confidencialidad e integridad a través de vectores desconocidos relacionado con Core, una vulnerabilidad diferente a CVE-2012-0546 y CVE-2012-0567."
    }
  ],
  "lastModified": "2026-06-16T23:37:30.677",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:financial_services_software:10.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A855A7BA-D041-485B-8433-9CDA09E2174D"
            },
            {
              "criteria": "cpe:2.3:a:oracle:financial_services_software:10.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE5F2789-80F4-4525-8588-68BF14C279E4"
            },
            {
              "criteria": "cpe:2.3:a:oracle:financial_services_software:11.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BE0D2F2-C41A-4C40-9D15-E91537684C42"
            },
            {
              "criteria": "cpe:2.3:a:oracle:financial_services_software:11.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF80F870-03AD-4C40-BFEC-7885579E70FE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com"
}