Unauthenticated Access Vulnerability in Oracle Financial Services Applications User Interface

CVE-2018-2722

What is CVE-2018-2722?

This vulnerability affects the Oracle Financial Services Price Creation and Discovery component, allowing unauthenticated attackers with network access via HTTP to compromise the system. While the attack requires human interaction from someone other than the attacker, successful exploitation can lead to unauthorized updates, insertions, or deletions of accessible data. Moreover, it allows unauthorized read access to certain datasets, raising significant security concerns for users of the affected product.

References