Vulnerability in Oracle FLEXCUBE Universal Banking Affected by Network Access Exploit

CVE-2022-21428

Summary

A vulnerability exists in Oracle FLEXCUBE Universal Banking that allows a low privileged attacker with network access via HTTP to exploit the system. Successful exploitation of this issue can facilitate the unauthorized creation, deletion, or modification of sensitive data, as well as provide unauthorized access to critical information. Additionally, the vulnerability permits a partial denial of service, impacting the availability of the service. Exploitation necessitates human interaction from individuals other than the attacker, which adds a layer of complexity to the attack dynamics. Organizations utilizing affected versions should take immediate action to protect their systems and data.

References