CVE-2012-3157
Status: ModifiedLow (3.5)—
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, 6.0.1, 6.2.0, and 12 allows remote authenticated users to affect integrity, related to BASE.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
- Base score: 3.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.98%
- Percentile among all scored CVEs: 61
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-noinfo
References
- http://secunia.com/advisories/51019
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79360
- http://secunia.com/advisories/51019
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79360
Raw JSON (NVD)
Show
{
"id": "CVE-2012-3157",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert_us@oracle.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-10-16T23:55:04.040",
"references": [
{
"url": "http://secunia.com/advisories/51019",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79360",
"source": "secalert_us@oracle.com"
},
{
"url": "http://secunia.com/advisories/51019",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79360",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, 6.0.1, 6.2.0, and 12 allows remote authenticated users to affect integrity, related to BASE."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el componente Oracle FLEXCUBE Direct Banking en Oracle Financial Services Software v5.0.2, v5.0.5, v5.1.0, v5.2.0, v5.3.0 hasta v5.3.4, v6.0.1, v6.2.0, y v12 permite a usuarios remotos autenticados a afectar la integridad, relacionado con BASE."
}
],
"lastModified": "2026-06-16T23:42:41.347",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC6865CE-AF21-417B-85ED-FB2BE778E55F"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67C3988B-2B84-4840-9AFD-1B6E629D2905"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:5.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "313B4C36-CD0B-4390-A444-BBF7C1C422DD"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:5.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "463011CD-89A0-43FC-B25A-FDC688451C90"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:5.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "938D22FB-970E-4B92-AA79-9C694C5805E3"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:5.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54EC5AFF-90DF-457A-9C4E-1FC8044D5F3B"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDC91055-89CE-40C7-8A8B-FB3FDE6AD0CC"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:6.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEE5EF0D-2F48-42C8-AF23-DFE844142F88"
},
{
"criteria": "cpe:2.3:a:oracle:financial_services_software:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39B86E65-1E06-476E-8755-24D743867DEE"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert_us@oracle.com"
}