Vulnerability in Oracle Banking Virtual Account Management by Oracle

CVE-2023-21905

Summary

A vulnerability exists in the Routing Hub component of Oracle Banking Virtual Account Management that allows an attacker with high privileges and network access via HTTP to exploit weaknesses within the system. This vulnerability necessitates human interaction from a user other than the attacker, which could lead to unauthorized creation, modification, or deletion of critical data. Successful exploitation would grant the attacker access to sensitive information across all Oracle Banking Virtual Account Management accessible data, posing a significant risk to the confidentiality and integrity of financial information.

References