Vulnerability in Oracle Financial Services Revenue Management and Billing Product by Oracle

CVE-2022-21580

Summary

A vulnerability exists in the Oracle Financial Services Revenue Management and Billing product that allows a low-privileged attacker with network access via HTTP to compromise critical features of the system. Although this vulnerability is challenging to exploit, it requires human interaction from an individual other than the attacker. The consequences of successful exploitation may include unauthorized access to sensitive data, as well as the ability to modify or delete data within the application. Additionally, it may allow the attacker to partially disrupt service, leading to business impact for organizations using Oracle Financial Services Revenue Management and Billing.

References