Unauthorized Data Access Vulnerability in Oracle Banking Trade Finance by Oracle

CVE-2023-22121

Summary

This vulnerability in Oracle Banking Trade Finance allows an unauthenticated attacker with network access to exploit certain functionalities of the application. The exploit requires human interaction from a person other than the attacker, leading to potential unauthorized updates, inserts, or deletions of data, as well as unauthorized reading of accessible data sets. Affected versions are 14.5, 14.6, and 14.7. The nature of this vulnerability poses risks to both the confidentiality and integrity of sensitive financial data.

References