Oracle Banking Trade Finance Vulnerability in Oracle Financial Services Applications

CVE-2023-22125

Summary

A security flaw exists in the Oracle Banking Trade Finance product of Oracle Financial Services Applications. This vulnerability allows low-privileged attackers with network access via HTTP to compromise the system. Successful exploitation requires interaction from a third party, potentially broadening the attack surface. While primarily affecting Oracle Banking Trade Finance, the ramifications may extend to associated products. An attacker may gain unauthorized capabilities to update, insert, or delete sensitive data, as well as read access to certain accessible information, posing a significant risk to data integrity and confidentiality.

References