Oracle Banking Liquidity Management Vulnerability
CVE-2024-21285

7.1HIGH

Key Information:

Vendor
Oracle
Vendor
CVE Published:
15 October 2024

Summary

A vulnerability in the Oracle Banking Liquidity Management product facilitates remote exploitation by low privileged attackers with network access through HTTP. Exploitation requires interaction from an external user, creating a risk for system integrity and possible unauthorized takeover of the application. Protection strategies should focus on mitigating risks associated with unauthorized access and ensuring robust network security.

Affected Version(s)

Oracle Banking Liquidity Management 14.5.0.12.0

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.