Vulnerability in Oracle Banking Trade Finance Component by Oracle
CVE-2022-21584

6.4MEDIUM

Key Information:

Vendor
Oracle
Status
Banking Trade Finance
Vendor
CVE Published:
19 July 2022

Summary

A vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications can be exploited by an attacker with low privileges and network access via HTTP. This vulnerability allows for unauthorized creation, deletion, or modification of critical data. Exploit attempts require human interaction from a user other than the attacker. Successful exploitation can lead to serious breaches of data integrity and confidentiality, allowing unauthorized access to sensitive information within Oracle Banking Trade Finance.

Affected Version(s)

Banking Trade Finance 14.5

References

https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.