Exploitable Web UI Vulnerability in Oracle Financial Services Behavior Detection Platform

CVE-2025-21550

Summary

A vulnerability exists in the Web UI component of the Oracle Financial Services Behavior Detection Platform that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation of this vulnerability necessitates human interaction from a user other than the attacker. Although the primary target is the Behavior Detection Platform, successful exploitation could have broader implications, affecting other interconnected products. Consequences of an attack may include unauthorized access, modification, or deletion of accessible data, and unauthorized reading of certain stored data, thus posing risks to data confidentiality and integrity.

References