Vulnerability in Oracle Banking Virtual Account Management by Oracle

CVE-2023-21904

Summary

A vulnerability exists in Oracle Banking Virtual Account Management that allows a high-privileged attacker with network access to exploit the system. This issue requires human interaction from a user other than the attacker, making it somewhat challenging to initiate. Successful exploitation can lead to unauthorized access to sensitive data and give attackers the ability to perform updates, inserts, or deletions of accessible data, potentially resulting in partial denial of service. Organizations using supported versions 14.5, 14.6, and 14.7 should prioritize applying available patches to mitigate these risks.

References