Unauthenticated Access Vulnerability in Oracle Financial Services Analytical Applications
CVE-2026-34310

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Financial Services Analytical Applications Infrastructure
Vendor
CVE Published:
21 April 2026

What is CVE-2026-34310?

A vulnerability exists in the Oracle Financial Services Analytical Applications Infrastructure that allows unauthenticated attackers with network access via HTTP to gain unauthorized access to sensitive data. This flaw can lead to severe data breaches, where attackers may leverage the issue to access critical data or even compromise the entire data set managed by the affected applications. The supported versions vulnerable to this security risk include 8.0.7.9, 8.0.8.7, and 8.1.2.5. Organizations using these versions must address the vulnerability promptly to prevent potential unauthorized access.

Affected Version(s)

Oracle Financial Services Analytical Applications Infrastructure 8.0.7.9

Oracle Financial Services Analytical Applications Infrastructure 8.0.8.7

Oracle Financial Services Analytical Applications Infrastructure 8.1.2.5

References

https://www.oracle.com/security-alerts/cpuapr2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.