Vulnerability in Oracle Banking Trade Finance Product by Oracle
CVE-2022-21581

5.9MEDIUM

Key Information:

Vendor
Oracle
Status
Banking Trade Finance
Vendor
CVE Published:
19 July 2022

Summary

The vulnerability in Oracle Banking Trade Finance allows low-privileged attackers with network access to execute unauthorized actions such as creating, deleting, or modifying critical data. Exploitation necessitates human interaction from an external individual, increasing the complexity of successful attacks. This vulnerability could lead to unauthorized reading of sensitive data and the potential for partial denial of service, which can disrupt banking operations.

Affected Version(s)

Banking Trade Finance 14.5

References

https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.