Vulnerability in Oracle Financial Services Analytical Applications Infrastructure

CVE-2023-21901

Summary

A vulnerability exists within the Oracle Financial Services Analytical Applications Infrastructure that can be exploited by low-privileged attackers with network access via HTTP. This weakness may allow unauthorized actions such as updates, inserts, or deletions to data that the Infrastructure has access to. Additionally, it poses a risk of unauthorized read access to certain data and potentially leads to a partial denial of service situation. While specifically affecting the Infrastructure component, the implications of these attacks may extend to other associated products, thereby increasing the overall impact on an organization's operational capabilities.

References