Unprotected Access in Oracle Financial Services Analytical Applications Infrastructure

CVE-2021-2140

Summary

This vulnerability allows an unauthenticated attacker with network access to the Oracle Financial Services Analytical Applications Infrastructure to potentially compromise the system. The exploitation of this flaw requires human interaction from a third party, which makes it a unique security concern. A successful attack could lead to unauthorized data modifications, including updates, inserts, or deletions, along with the ability to read sensitive data. The impact of this vulnerability extends beyond the affected component, as it may influence other products within the Oracle ecosystem.

References