CVE-2016-0672 Information disclosure in n/a

What is CVE-2016-0672?

CVE-2016-0672 is a medium-severity vulnerability in n/a, published on 21 Apr 2016. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login.

Which versions are affected by CVE-2016-0672?

It affects 1 product.

Products include Oracle Flexcube Direct Banking.

How do I fix CVE-2016-0672?

No fix has been published for CVE-2016-0672 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-0672 being exploited?

There is no known exploitation of CVE-2016-0672 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2016-0699 Other in n/a Critical 9.1
• CVE-2017-10181 Denial of service in FLEXCUBE Direct Banking Medium 6.8
• CVE-2020-14890 Information disclosure in FLEXCUBE Direct Banking Medium 6.5
• CVE-2020-14897 Information disclosure in FLEXCUBE Direct Banking Medium 6.5
• CVE-2019-2980 Information disclosure in FLEXCUBE Direct Banking Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2v4r-w4rj-qv25.