Vulnerability in Oracle FLEXCUBE Universal Banking by Oracle

CVE-2022-21544

What is CVE-2022-21544?

A vulnerability exists in the Oracle FLEXCUBE Universal Banking product that enables an attacker with low privileges and HTTP network access to exploit the system. Successful exploitation requires human interaction, making it particularly insidious in nature. This can lead to a complete takeover of the banking application, thereby compromising confidentiality, integrity, and availability of sensitive financial data. Organizations using affected versions must prioritize patching to mitigate the risks associated with this vulnerability.

References