Vulnerability in Oracle FLEXCUBE Universal Banking Product by Oracle

CVE-2021-2324

What is CVE-2021-2324?

The vulnerability within Oracle's FLEXCUBE Universal Banking product enables low-privileged attackers to exploit certain conditions through HTTP. While it requires human interaction from targets, this vulnerability can lead to unauthorized modifications, deletions, and access to sensitive data. Attackers could gain the ability to alter or view data that should remain protected, resulting in severe threats to the integrity and confidentiality of banking transactions.

References