Vulnerability in Oracle Banking Trade Finance Product by Oracle

CVE-2022-21585

What is CVE-2022-21585?

A vulnerability in the Oracle Banking Trade Finance product allows low privileged attackers with HTTP network access to manipulate critical data. The attack requires human interaction, significantly limiting the exploitability. If successful, it can lead to unauthorized creation, deletion, or modification of sensitive data and may partially disrupt the availability of the service. This highlights the importance of applying timely security patches and maintaining secure configurations.

References