Vulnerability in Oracle FLEXCUBE Universal Banking Product by Oracle

CVE-2022-21576

What is CVE-2022-21576?

A vulnerability exists in Oracle FLEXCUBE Universal Banking that could allow an attacker with low privileges and network access via HTTP to exploit the system. Successful exploitation may lead to unauthorized access to sensitive data, manipulation capabilities such as updates, inserts, or deletions, and potential partial denial of service. The affected versions include 12.3, 12.4, and 14.0 through 14.5, highlighting the necessity for users to update and secure their systems against possible threats.

References