Oracle Banking Trade Finance Vulnerability in Oracle Financial Services Applications

CVE-2023-22123

Summary

A vulnerability exists in the Oracle Banking Trade Finance component of Oracle Financial Services Applications, allowing low-privileged attackers with network access via HTTP to compromise the system. Successful exploitation requires human interaction from another person, which significantly broadens the potential impact beyond the affected product. This vulnerability could enable unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized read access to certain sensitive information. The issue notably affects versions 14.5 through 14.7, requiring prompt attention to mitigate potential data integrity and confidentiality risks.

References